DRUPAL-CONTRIB-2018-067
The Workbench Moderation module adds arbitrary moderation states to Drupal core's "unpublished" and "published" node states, and affects the behavior of node revisions when nodes are published.
In some conditions, content moderation fails to check a users access to use certain transitions, leading to an access bypass.
This issue is related to the Drupal Core release SA-CORE-2018-006.
What each source reports
OSV No score
The Workbench Moderation module adds arbitrary moderation states to Drupal core's "unpublished" and "published" node states, and affects the behavior of node revisions when nodes are published.
In some conditions, content moderation fails to check a users access to use certain transitions, leading to an access bypass.
This issue is related to the Drupal Core release SA-CORE-2018-006.
- Record
DRUPAL-CONTRIB-2018-067- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
drupal/workbench_moderationPackagist:https://packages.drupal.org/8 |
before 1.4.0 | 1.4.0 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
DRUPAL-CONTRIB-2018-067 is a vulnerability with no CVSS score yet in drupal/workbench_moderation, published October 17, 2018. No source lists public exploit code. Fixed in drupal/workbench_moderation 1.4.0.