Project:
Date:
2018-July-18
Vulnerability:
Information Disclosure
Description:
This module enables you to generate XML sitemaps and it helps search engines to more intelligently crawl a website and keep their results up to date.
The module doesn't sufficiently handle access rights under the scenario of updating contents from cron execution.
Solution:
- If you use the XML sitemap module for Drupal 7.x, upgrade to XML sitemap 7.x-2.4
Also see the XML sitemap project page.
Reported By:
- Balazs Janos Tatar Provisional Security Team member
Fixed By:
Coordinated By:
- Michael Hess of the Drupal Security Team
