Every CVE Search/ Get API key

DRUPAL-CONTRIB-2023-038

No scoreFix available

This module provides integration with Shorthand, an application which describes itself as "beautifully simple storytelling".

The module does not check appropriate permissions when displaying a list of all shorthand stories.

What each source reports

OSV No score

This module provides integration with Shorthand, an application which describes itself as "beautifully simple storytelling".

The module does not check appropriate permissions when displaying a list of all shorthand stories.

Record
DRUPAL-CONTRIB-2023-038
Updated
2026-11-02

Affected packages

Affected packages
PackageAffectedFixed
drupal/shorthand
Packagist:https://packages.drupal.org/8
before 4.0.3
4.0.3

History

History
RecordedChangedSources
first indexedOSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

DRUPAL-CONTRIB-2023-038 is a vulnerability with no CVSS score yet in drupal/shorthand, published August 23, 2023. No source lists public exploit code. Fixed in drupal/shorthand 4.0.3.

References

MoveEnter Open