Project: 
Permissions by Term
Project machine name: 
permissions_by_term
Date: 
2022-September-07
Security risk: 
Moderately critical 14 ∕ 25 AC:None/A:None/CI:Some/II:None/E:Theoretical/TD:Default
Vulnerability: 
Access bypass
Affected versions: 
<3.1.19
Description: 

This module enables you to restrict content via taxonomy terms and related permissions.

The module doesn't sufficiently restrict cached content in certain circumstances.

This vulnerability is mitigated by the fact that it only occurs when multiple entity types are enabled in the module.

Solution: 

Install the latest version:

  • If you use the Permissions by Term module for Drupal 9.x, upgrade to version 3.1.19
Reported By: 
Fixed By: 
Coordinated By: