DRUPAL-CONTRIB-2021-037
This module enables sites to define a domain from Domain Access that points directly to a group page.
The module doesn't sufficiently manage the access to content administrative paths allowing an attacker to see and take actions on content (nodes) they should be allowed to.
What each source reports
OSVNo score
This module enables sites to define a domain from Domain Access that points directly to a group page.
The module doesn't sufficiently manage the access to content administrative paths allowing an attacker to see and take actions on content (nodes) they should be allowed to.
- Record
DRUPAL-CONTRIB-2021-037- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
drupal/domain_groupPackagist:https://packages.drupal.org/8 | before 1.4.0, 2.0.0 to 2.0.0 | 1.4.0 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
DRUPAL-CONTRIB-2021-037 is a vulnerability with no CVSS score yet in drupal/domain_group, published September 22, 2021. No source lists public exploit code. Fixed in drupal/domain_group 1.4.0.