DRUPAL-CONTRIB-2018-073
The Paragraphs module allows Drupal Site Builders to make content organization cleaner so that you can give more editing power to end-users.
The module doesn't sufficiently check access to create new paragraph entities which can cause access bypass issues when used in combination with other contributed modules.
What each source reports
OSV No score
The Paragraphs module allows Drupal Site Builders to make content organization cleaner so that you can give more editing power to end-users.
The module doesn't sufficiently check access to create new paragraph entities which can cause access bypass issues when used in combination with other contributed modules.
- Record
DRUPAL-CONTRIB-2018-073- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
drupal/paragraphsPackagist:https://packages.drupal.org/8 |
before 1.5.0 | 1.5.0 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
DRUPAL-CONTRIB-2018-073 is a vulnerability with no CVSS score yet in drupal/paragraphs, published October 31, 2018. No source lists public exploit code. Fixed in drupal/paragraphs 1.5.0.