DRUPAL-CONTRIB-2021-007
No scoreFix available
This module provides a new UI experience for node editing using the Gutenberg Editor library.
The module did not correctly validate access rules in certain situations allowing anonymous users to delete blocks.
What each source reports
OSV No score
This module provides a new UI experience for node editing using the Gutenberg Editor library.
The module did not correctly validate access rules in certain situations allowing anonymous users to delete blocks.
- Record
DRUPAL-CONTRIB-2021-007- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
drupal/gutenbergPackagist:https://packages.drupal.org/8 |
before 1.12.0 | 1.12.0 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
DRUPAL-CONTRIB-2021-007 is a vulnerability with no CVSS score yet in drupal/gutenberg, published May 12, 2021. No source lists public exploit code. Fixed in drupal/gutenberg 1.12.0.