| Package | Affected versions | Patched versions |
|---|---|---|
| drupal/wisski | < 4.2.0 | 4.2.0 |
| wisski | < 4.2 | 4.2 |
The module adds support for the mirador viewer in WissKI and enables annotations on images via the mirador viewer.
It does not sufficiently check the submitted parameters via a route and writes these to the session object without further checks, which can lead to Access Bypass.
This vulnerability is mitigated by the fact that it is specific to the wisski_mirador submodule.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free