DRUPAL-CONTRIB-2023-038
No scoreFix available
This module provides integration with Shorthand, an application which describes itself as "beautifully simple storytelling".
The module does not check appropriate permissions when displaying a list of all shorthand stories.
What each source reports
OSV No score
This module provides integration with Shorthand, an application which describes itself as "beautifully simple storytelling".
The module does not check appropriate permissions when displaying a list of all shorthand stories.
- Record
DRUPAL-CONTRIB-2023-038- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
drupal/shorthandPackagist:https://packages.drupal.org/8 |
before 4.0.3 | 4.0.3 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
DRUPAL-CONTRIB-2023-038 is a vulnerability with no CVSS score yet in drupal/shorthand, published August 23, 2023. No source lists public exploit code. Fixed in drupal/shorthand 4.0.3.