| Package | Affected versions | Patched versions |
|---|---|---|
| linkit | = 7.x-2.0= 7.x-2.1= 7.x-2.2= 7.x-2.3 |
The Linkit module 7.x-2.x before 7.x-2.3 for Drupal, when using an entity access module, does not check permissions when searching for entities, which allows remote attackers to obtain sensitive information via unspecified vectors.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free