Skip to content
OpenAdvisories
Unscored DRUPAL-CONTRIB-2023-009

This module provides a new UI experience for node editing - Gutenberg editor. This vulnerability can cause DoS by using reusable blocks imp…

Published Mar 8, 2023 · Updated Sep 10, 2026 · Assigned by DRUPAL

Package: drupal/gutenberg Ecosystem: Packagist

Description

This module provides a new UI experience for node editing - Gutenberg editor.

This vulnerability can cause DoS by using reusable blocks improperly.

This vulnerability is mitigated by the fact an attacker must have "use gutenberg" permission to exploit it.

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/gutenberg < 2.7.0 2.7.0 DRUPAL-CONTRIB-2023-009

References