Skip to content
OpenAdvisories
Unscored DRUPAL-CORE-2019-011

The Media Library module has a security vulnerability whereby it doesn't sufficiently restrict access to media items in certain configurati…

Published Dec 18, 2019 · Updated Sep 19, 2026 · Assigned by DRUPAL

Package: drupal/core Ecosystem: Packagist

Description

The Media Library module has a security vulnerability whereby it doesn't sufficiently restrict access to media items in certain configurations.

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/core >= 8.0.0, < 8.7.11 · >= 8.8.0, < 8.8.1 8.7.11, 8.8.1 DRUPAL-CORE-2019-011

References