This module enables you to customize meta tags to help with a site's search engine ranking and improve the display of page summaries when shared on social networks.
The module doesn't sufficiently check for a site being in maintenance mode.
This vulnerability is mitigated by the fact that the site must be configured to disallow access to certain content, and must be put into maintenance mode.
Install the latest version:
- If you use the Metatag module for Drupal 8.x, upgrade to Metatag 8.x-1.9
Also see the Metatag project page.
- Damien McKenna of the Drupal Security Team
- Damien McKenna of the Drupal Security Team