Junglewise Threat Intelligence

DRUPAL-CONTRIB-2020-032 - The Group module enables you to hand out permissions on a smaller subset, section or community of your website. With the 1.1 security relea

Severity: info · Published 2020-08-05

Technologies: Packagist:Https://Packages.Drupal.Org/8 Drupal/Group. Vendors: Packagist:Https://Packages.Drupal.Org/8.

Executive brief

The Group module enables you to hand out permissions on a smaller subset, section or community of your website.

With the 1.1 security release, new code was introduced to ensure proper access for all entity types, but a mistake introduced unexpected access to unpublished nodes.

Affected products

  • packagist:https://packages.drupal.org/8 drupal/group

Related threats