Project: 
Paragraphs
Date: 
2018-October-31
Security risk: 
Moderately critical 10∕25 AC:Complex/A:None/CI:None/II:Some/E:Theoretical/TD:Uncommon
Vulnerability: 
Access Bypass
Affected versions: 
<1.5.0
Description: 

The Paragraphs module allows Drupal Site Builders to make content organization cleaner so that you can give more editing power to end-users.

The module doesn't sufficiently check access to create new paragraph entities which can cause access bypass issues when used in combination with other contributed modules.

Solution: 

Install the latest version:

Also see the Paragraphs project page.

Reported By: 
Fixed By: 
Coordinated By: