Install

Works with Drupal: ^8 || ^9

Using Composer to manage Drupal site dependencies

Alternative installation files

Download fac-8.x-1.8.tar.gztar.gz 28.76 KB
MD5: 107dd095a42d145eb93ef4a6e43a79fa
SHA-1: 4d466bdbe7e4c65836dfc4c53d462ec9c3b5a76c
SHA-256: 4d7cbc23e615301987fa8db08af2744e6e322058e88c5ca2cd9495fafa9940b0
Download fac-8.x-1.8.zipzip 46.18 KB
MD5: 0b05ebaca91aa7068b842048ac2ad1e8
SHA-1: 38057067b35154da83bb0f35c0de8c618cbc45bb
SHA-256: 0370c51f5c902e1fc90d4eb601b53aeb60b3034052a5be5be9e389cf84a2c0d1
Downloads are for manual installation, which is not recommended when using Drupal 8 or later.

Release notes

This release fixes a security vulnerability where a malicious user could be able to read search results generated by users with other roles, disclosing search results the user normally has no access to. This vulnerability could only be exploited when the configuration option "Perform search as anonymous user only" is switched off.

See SA-CONTRIB-2021-005 for details.

If your configuration enables searches as authenticated users we urge you to update the module to this release.

Created by: Marty2081
Created on: 17 Mar 2021 at 12:02 UTC
Last updated: 17 Mar 2021 at 19:29 UTC
Git tag 8.x-1.8
Security update
Bug fixes

Other releases