DRUPAL-CONTRIB-2019-095
The Permissions by Term module extends Drupal by functionality for restricting access to single nodes via taxonomy terms.
The module doesn't sufficiently restrict access to node previews, when the Search API module is used to display nodes in search result lists.
What each source reports
OSV No score
The Permissions by Term module extends Drupal by functionality for restricting access to single nodes via taxonomy terms.
The module doesn't sufficiently restrict access to node previews, when the Search API module is used to display nodes in search result lists.
- Record
DRUPAL-CONTRIB-2019-095- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
drupal/permissions_by_termPackagist:https://packages.drupal.org/8 |
before 2.0.0 | 2.0.0 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
DRUPAL-CONTRIB-2019-095 is a vulnerability with no CVSS score yet in drupal/permissions_by_term, published December 11, 2019. No source lists public exploit code. Fixed in drupal/permissions_by_term 2.0.0.