Project machine name:
simple_ampDate:
2019-October-02
Vulnerability:
Access bypass
Affected versions:
<1.16.0
Description:
This module allows display of a site's content in AMP format.
The module doesn't sufficiently check access on unpublished or restricted content.
Solution:
Install the latest version of the module.
- If you use the Simple AMP module for Drupal 8.x, upgrade to Simple AMP 8.x-1.16
Also see the Simple AMP (Accelerated Mobile Pages) project page.
Reported By:
Fixed By:
Coordinated By:
- Damien McKenna of the Drupal Security Team