| Package | Affected versions | Patched versions |
|---|---|---|
| drupal/restrict_route_by_ip | < 1.3.0 | 1.3.0 |
| restrict route by ip | ≥ 1.0.0, < 1.3.0 | 1.3.0 |
The Restrict route by IP module provides an interface to manage route restriction by IP address.
The module doesn't sufficiently protect certain routes from CSRF attacks.
This vulnerability is mitigated by the fact that you need to know the route machine name.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free