{"id":"DRUPAL-CONTRIB-2022-055","details":"This module enables you to restrict content via taxonomy terms and related permissions.\n\nThe module doesn't sufficiently restrict cached content in certain circumstances.\n\nThis vulnerability is mitigated by the fact that it only occurs when multiple entity types are enabled in the module.","modified":"2026-09-10T03:45:53.411195996Z","published":"2022-09-07T17:04:31Z","references":[{"type":"WEB","url":"https://www.drupal.org/sa-contrib-2022-055"}],"affected":[{"package":{"name":"drupal/permissions_by_term","ecosystem":"Packagist:https://packages.drupal.org/8","purl":"pkg:composer/drupal/permissions_by_term?repository_url=https:%2F%2Fpackages.drupal.org%2F8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.19"}],"database_specific":{"constraint":"\u003c3.1.19"}}],"database_specific":{"source":"https://github.com/DrupalSecurityTeam/drupal-advisory-database/blob/main/advisories/permissions_by_term/DRUPAL-CONTRIB-2022-055.json","affected_versions":"\u003c3.1.19"}}],"schema_version":"1.9.0","credits":[{"name":"Aleksi Peebles","contact":["https://www.drupal.org/user/191965"]},{"name":"Andy Fowlston","contact":["https://www.drupal.org/user/220112"]},{"name":"Joseph","contact":["https://www.drupal.org/user/3426415"]},{"name":"Julian Pustkuchen","contact":["https://www.drupal.org/user/291091"]},{"name":"ytsurk","contact":["https://www.drupal.org/user/1153644"]}]}