Project: 
Preview Link
Date: 
2019-January-23
Security risk: 
Moderately critical 13 ∕ 25 AC:Basic/A:None/CI:Some/II:None/E:Theoretical/TD:All
Vulnerability: 
Access bypass
Affected versions: 
<1.1.0
Description: 

The Preview Link module enables you to generate preview links so anonymous users can access unpublished revisions of content.
The last release of the module introduced an access bypass allowing users to present invalid tokens but still access unpublished content.

Solution: 

Install the latest version:

Also see the Preview Link project page.

Reported By: 
Fixed By: 
Coordinated By: