Junglewise Threat Intelligence

DRUPAL-CONTRIB-2018-073 - The Paragraphs module allows Drupal Site Builders to make content organization cleaner so that you can give more editing power to end-users.

Severity: info · Published 2018-10-31

Technologies: Packagist:Https://Packages.Drupal.Org/8 Drupal/Paragraphs. Vendors: Packagist:Https://Packages.Drupal.Org/8.

Executive brief

The Paragraphs module allows Drupal Site Builders to make content organization cleaner so that you can give more editing power to end-users.

The module doesn't sufficiently check access to create new paragraph entities which can cause access bypass issues when used in combination with other contributed modules.

Affected products

  • packagist:https://packages.drupal.org/8 drupal/paragraphs

Related threats