DRUPAL-CONTRIB-2023-042
DRUPAL-CONTRIB-2023-042
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
This module enables you to hide email addresses from bots and site scrapers by using the rot13 strategy. The module doesn't sufficiently escape the data attribute under the scenario a user has access to manipulate that value. This vulnerability is mitigated by the fact that an attacker must have a role with permissions to allow data attributes in content on a site.
Correctif disponible
- Publication
- Mise à jour
Pile logicielle: php
Produits et versions concernés
drupal/obfuscate_email Packagist:https://packages.drupal.org/8
- Plages de versions concernées
- ECOSYSTEM: < 2.0.1
Mettez à jour vers 2.0.1