| Package | Affected versions | Patched versions |
|---|---|---|
| drupal/eca | ≥ 2.0.0, < 2.0.16≥ 2.1.0, < 2.1.7< 1.1.12 | 2.0.162.1.71.1.12 |
| eca | ≥ 2.0.0, < 2.0.16≥ 2.1.0, < 2.1.7< 1.1.12 | 2.0.162.1.71.1.12 |
This module enables you to define automations on your Drupal site.
The module doesn't sufficiently protect certain routes from CSRF attacks.
This vulnerability can be mitigated by disabling the "eca_ui" submodule, which leaves ECA functionality intact, but the vulnerable routes will no longer be available.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free