| Package | Affected versions | Patched versions |
|---|---|---|
| drupal/datafield | < 2.0.13 | 2.0.13 |
| data field | < 2.0.13 | 2.0.13 |
This module enables you to store structured data in configurable fields and expose Data Field values through JSON endpoints.
The module doesn't sufficiently check access when returning Data Field values through its JSON endpoint. This may allow anonymous users to access field values belonging to entities they cannot otherwise view, including unpublished content.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free