Description
This module is a tool for developers, analysts, and administrators that allows them to generate reports on a given Drupal installation.
The module does not sufficiently sanitize some data presented in its reports.
This vulnerability is mitigated by the fact that an attacker must have a role with permissions to administer an impacted content type.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | drupal/xray_audit | < 1.1.1 | 1.1.1 | DRUPAL-CONTRIB-2023-012 |