DRUPAL-CONTRIB-2019-094
No scoreFix available
This project enables administrators to create modal dialogs.
The routes used by the module lacked proper permissions, allowing untrusted users to access, create and modify modal configurations.
What each source reports
OSV No score
This project enables administrators to create modal dialogs.
The routes used by the module lacked proper permissions, allowing untrusted users to access, create and modify modal configurations.
- Record
DRUPAL-CONTRIB-2019-094- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
drupal/modal_pagePackagist:https://packages.drupal.org/8 |
before 2.5.0 | 2.5.0 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
DRUPAL-CONTRIB-2019-094 is a vulnerability with no CVSS score yet in drupal/modal_page, published December 11, 2019. No source lists public exploit code. Fixed in drupal/modal_page 2.5.0.