Project: 
Shorthand
Project machine name: 
shorthand
Date: 
2023-August-23
Security risk: 
Critical 15 ∕ 25 AC:None/A:None/CI:Some/II:None/E:Theoretical/TD:All
Vulnerability: 
Access bypass
Affected versions: 
<4.0.3
Description: 

This module provides integration with Shorthand, an application which describes itself as "beautifully simple storytelling".

The module does not check appropriate permissions when displaying a list of all shorthand stories.

Solution: 

Install the latest version:

  • If you use the Shorthand module for Drupal 8+, upgrade to Shorthand 4.0.3
Reported By: 
Fixed By: 
Coordinated By: