Junglewise Threat Intelligence
DRUPAL-CONTRIB-2021-007 - This module provides a new UI experience for node editing using the Gutenberg Editor library. The module did not correctly validate access
Severity: info · Published 2021-05-12
Technologies: Packagist:Https://Packages.Drupal.Org/8 Drupal/Gutenberg. Vendors: Packagist:Https://Packages.Drupal.Org/8.
Executive brief
This module provides a new UI experience for node editing using the Gutenberg Editor library.
The module did not correctly validate access rules in certain situations allowing anonymous users to delete blocks.
Affected products
- packagist:https://packages.drupal.org/8 drupal/gutenberg