DRUPAL-CONTRIB-2022-040
The Wingsuit module enables site builders to build UI Patterns (and|or) Twig Components with Storybook and use them without any mapping code in Drupal.
The module doesn't have an access check for the admin form allowing an attacker to view and modify the Wingsuit configuration.
What each source reports
OSV No score
The Wingsuit module enables site builders to build UI Patterns (and|or) Twig Components with Storybook and use them without any mapping code in Drupal.
The module doesn't have an access check for the admin form allowing an attacker to view and modify the Wingsuit configuration.
- Record
DRUPAL-CONTRIB-2022-040- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
drupal/wingsuit_companionPackagist:https://packages.drupal.org/8 |
before 1.1.0 | 1.1.0 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
DRUPAL-CONTRIB-2022-040 is a vulnerability with no CVSS score yet in drupal/wingsuit_companion, published May 18, 2022. No source lists public exploit code. Fixed in drupal/wingsuit_companion 1.1.0.