Project:
Project machine name:
gathercontentDate:
2018-November-28
Vulnerability:
Access bypass
Description:
This module enables you to import and export data from the GatherContent service.
The module didn't properly protect its administrative paths.
Solution:
Install the latest version:
- If you use the gathercontent module for Drupal 7.x, upgrade to gathercontent 7.x-3.5
Also see the GatherContent project page.
Reported By:
Fixed By:
Coordinated By:
- Michael Hess of the Drupal Security Team
- Greg Knaddison of the Drupal Security Team
