DRUPAL-CONTRIB-2021-024
This project enables administrators to restrict access from anonymous and regular users to pre-defined pages.
The administration routes used by the project lacked proper permissions, allowing untrusted users to access, create and modify the module's settings.
What each source reports
OSV No score
This project enables administrators to restrict access from anonymous and regular users to pre-defined pages.
The administration routes used by the project lacked proper permissions, allowing untrusted users to access, create and modify the module's settings.
- Record
DRUPAL-CONTRIB-2021-024- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
drupal/pages_restrictionPackagist:https://packages.drupal.org/8 |
before 1.4.0 | 1.4.0 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
DRUPAL-CONTRIB-2021-024 is a vulnerability with no CVSS score yet in drupal/pages_restriction, published July 28, 2021. No source lists public exploit code. Fixed in drupal/pages_restriction 1.4.0.