Stephan Zeidler

An incorrect authorization issue allows forceful browsing. The module fails to sufficiently check entity access across several editor endpoints. Exploitation requires the attacker to possess a role with the "use gutenberg" permission.

The issue is related to a Cross-Site Request Forgery (CSRF) vulnerability in Drupal Gutenberg, which allows for Cross-Site Request Forgery. This vulnerability can be exploited by a remote attacker to perform a CSRF attack.