DRUPAL-CONTRIB-2019-058 This module enables you to customize meta tags to help with a site's search engine ranking and improve the display of page summaries when sh
An attacker can bypass maintenance mode restrictions to access restricted content if the site is configured to disallow access to certain content.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is DRUPAL-CONTRIB-2019-058?
DRUPAL-CONTRIB-2019-058 is a vulnerability in drupal/metatag, published on 24 Jul 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
This module enables you to customize meta tags to help with a site's search engine ranking and improve the display of page summaries when shared on social networks.
The module doesn't sufficiently check for a site being in maintenance mode.
This vulnerability is mitigated by the fact that the site must be configured to disallow access to certain content, and must be put into maintenance mode.
Which versions are affected by DRUPAL-CONTRIB-2019-058?
Linux distribution packages (1)
drupal/metatag Packagist:https://packages.drupal.org/8 | All versions | 1.9.0 |
How do I fix DRUPAL-CONTRIB-2019-058?
Upgrade to a fixed version.
Is DRUPAL-CONTRIB-2019-058 being exploited?
There is no known exploitation of DRUPAL-CONTRIB-2019-058 in the wild and no public exploit code.