| Package | Affected versions | Patched versions |
|---|---|---|
| drupal/entity_delete_log | < 1.1.1 | 1.1.1 |
| entity delete log | < 1.1.1 | 1.1.1 |
The Entity Delete Log module tracks the deletion of configured entity types, such as node or comments.
It does not add sufficient permission to the log report page, allowing an attacker to view information from deleted entities.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free