Protected Pages - Critical - Access bypass - SA-CONTRIB-2023-013

Project: Protected PagesDate: 2023-April-12Security risk: Critical 16∕25 AC:Basic/A:None/CI:Some/II:Some/E:Theoretical/TD:AllVulnerability: Access bypassDescription: This module enables you to secure any page with a password.
The module does not sufficiently restrict access to the page content.Solution: Install the latest version:

• If you use the Protected Pages module for Drupal 8/9/10, upgrade to Protected Pages 8.x-1.6

Reported By: 

• Shelane French

Fixed By: 

• Mark Dorison
• Diego Rodrigo da Silva

Coordinated By: 

• Greg Knaddison of the Drupal Security Team