DRUPAL-CONTRIB-2022-055
This module enables you to restrict content via taxonomy terms and related permissions.
The module doesn't sufficiently restrict cached content in certain circumstances.
This vulnerability is mitigated by the fact that it only occurs when multiple entity types are enabled in the module.
What each source reports
OSV No score
This module enables you to restrict content via taxonomy terms and related permissions.
The module doesn't sufficiently restrict cached content in certain circumstances.
This vulnerability is mitigated by the fact that it only occurs when multiple entity types are enabled in the module.
- Record
DRUPAL-CONTRIB-2022-055- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
drupal/permissions_by_termPackagist:https://packages.drupal.org/8 |
before 3.1.19 | 3.1.19 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
DRUPAL-CONTRIB-2022-055 is a vulnerability with no CVSS score yet in drupal/permissions_by_term, published September 7, 2022. No source lists public exploit code. Fixed in drupal/permissions_by_term 3.1.19.