Skip to content
OpenAdvisories
Unscored DRUPAL-CONTRIB-2023-049

This module enables you to view all paragraph entities in an admin view. The module contains an access bypass that allows non admin users t…

Published Nov 1, 2023 · Updated Sep 10, 2026 · Assigned by DRUPAL

Description

This module enables you to view all paragraph entities in an admin view.
The module contains an access bypass that allows non admin users to access the view.
The vulnerability can be mitigated by editing the view to change the permission required to access the page.

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/paragraphs_admin < 1.5.0 1.5.0 DRUPAL-CONTRIB-2023-049

References