Junglewise Threat Intelligence

DRUPAL-CONTRIB-2022-055 - This module enables you to restrict content via taxonomy terms and related permissions. The module doesn't sufficiently restrict cached con

Severity: info · Published 2022-09-07

Technologies: Packagist:Https://Packages.Drupal.Org/8 Drupal/Permissions By Term. Vendors: Packagist:Https://Packages.Drupal.Org/8.

Executive brief

This module enables you to restrict content via taxonomy terms and related permissions.

The module doesn't sufficiently restrict cached content in certain circumstances.

This vulnerability is mitigated by the fact that it only occurs when multiple entity types are enabled in the module.

Affected products

  • packagist:https://packages.drupal.org/8 drupal/permissions_by_term

Related threats