DRUPAL-CONTRIB-2023-009
This module provides a new UI experience for node editing - Gutenberg editor.
This vulnerability can cause DoS by using reusable blocks improperly.
This vulnerability is mitigated by the fact an attacker must have "use gutenberg" permission to exploit it.
What each source reports
OSV No score
This module provides a new UI experience for node editing - Gutenberg editor.
This vulnerability can cause DoS by using reusable blocks improperly.
This vulnerability is mitigated by the fact an attacker must have "use gutenberg" permission to exploit it.
- Record
DRUPAL-CONTRIB-2023-009- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
drupal/gutenbergPackagist:https://packages.drupal.org/8 |
before 2.7.0 | 2.7.0 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
DRUPAL-CONTRIB-2023-009 is a vulnerability with no CVSS score yet in drupal/gutenberg, published March 8, 2023. No source lists public exploit code. Fixed in drupal/gutenberg 2.7.0.