Every CVE Search/ Get API key

DRUPAL-CONTRIB-2019-069

No scoreFix available

This module provides a new UI experience for node editing - Gutenberg editor.

The routes used by the Gutenberg editor lack proper permissions allowing untrusted users to view and modify some content they should not be able to view or modify.

What each source reports

OSV No score

This module provides a new UI experience for node editing - Gutenberg editor.

The routes used by the Gutenberg editor lack proper permissions allowing untrusted users to view and modify some content they should not be able to view or modify.

Record
DRUPAL-CONTRIB-2019-069
Updated
2026-11-02

Affected packages

Affected packages
PackageAffectedFixed
drupal/gutenberg
Packagist:https://packages.drupal.org/8
before 1.8.0
1.8.0

History

History
RecordedChangedSources
first indexedOSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

DRUPAL-CONTRIB-2019-069 is a vulnerability with no CVSS score yet in drupal/gutenberg, published September 25, 2019. No source lists public exploit code. Fixed in drupal/gutenberg 1.8.0.

References

MoveEnter Open