DRUPAL-CONTRIB-2021-008
This module enables you to add customizable facets on search pages, from core search or searches provided by Search API.
The module doesn't sufficiently filter all output in certain circumstances.
This vulnerability is mitigated by the fact that an attacker must have a role with the permission "administer facets".
What each source reports
OSV No score
This module enables you to add customizable facets on search pages, from core search or searches provided by Search API.
The module doesn't sufficiently filter all output in certain circumstances.
This vulnerability is mitigated by the fact that an attacker must have a role with the permission "administer facets".
- Record
DRUPAL-CONTRIB-2021-008- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
drupal/facetsPackagist:https://packages.drupal.org/8 |
before 1.8.0 | 1.8.0 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
DRUPAL-CONTRIB-2021-008 is a vulnerability with no CVSS score yet in drupal/facets, published May 12, 2021. No source lists public exploit code. Fixed in drupal/facets 1.8.0.