DRUPAL-CONTRIB-2019-004
The Preview Link module enables you to generate preview links so anonymous users can access unpublished revisions of content.
The last release of the module introduced an access bypass allowing users to present invalid tokens but still access unpublished content.
What each source reports
OSV No score
The Preview Link module enables you to generate preview links so anonymous users can access unpublished revisions of content.
The last release of the module introduced an access bypass allowing users to present invalid tokens but still access unpublished content.
- Record
DRUPAL-CONTRIB-2019-004- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
drupal/preview_linkPackagist:https://packages.drupal.org/8 |
before 1.1.0 | 1.1.0 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
DRUPAL-CONTRIB-2019-004 is a vulnerability with no CVSS score yet in drupal/preview_link, published January 23, 2019. No source lists public exploit code. Fixed in drupal/preview_link 1.1.0.