DRUPAL-CONTRIB-2023-025
DRUPAL-CONTRIB-2023-025
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This module provides integration with Mailchimp, a popular email delivery service. A route related to OAuth authentication is not protected against a Cross Site Request Forgery attack.
Fix available
- Published
- Updated
Stack: php
Affected products and versions
drupal/mailchimp Packagist:https://packages.drupal.org/8
- Affected ranges
- ECOSYSTEM: ≥ 2.2.0, < 2.2.2
Update to 2.2.2