Vulnerability identifier: #VU60673
Vulnerability risk: Low
Exploitation vector: Network
Exploit availability: No
The vulnerability allows a remote user to gain unauthorized access to sensitive information.
The vulnerability exists due to improper access restrictions within the Quick Edit module. A remote authenticated user with "access in-place editing" permission can view otherwise restricted content.
Install updates from vendor's website.
Vulnerable software versions
Drupal: 9.3.0 - 9.3.5, 9.2.0 - 9.2.12, 9.1.0 - 9.1.15, 9.0.0 - 9.0.14
Can this vulnerability be exploited remotely?
Is there known malware, which exploits this vulnerability?