| Package | Affected versions | Patched versions |
|---|---|---|
| drupal/actstream | ≥ 2.1.0, < 2.1.1< 2.0.1 | 2.1.12.0.1 |
Actstream (short for Activity Stream) aggregates a user's activity from external services (RSS feeds, etc.) into per-user activity stream entities.
The configuration route does not sufficiently check that the user editing it is the account owner (or a user administrator) leading to an access bypass vulnerability.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free