| Package | Affected versions | Patched versions |
|---|---|---|
| drupal/drupal | ≥ 8.0.0, < 8.5.8≥ 8.6.0, < 8.6.2 | 8.5.88.6.2 |
The Contextual Links module doesn't sufficiently validate the requested contextual links. This vulnerability is mitigated by the fact that an attacker must have a role with the permission "access contextual links".
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free