PT-2019-20542 · Packagist · Drupal/Bat

Published

2019-10-16

·

Updated

2019-10-16

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
The Bat module provides a foundation through which a wide range of availability management, reservation and booking use cases can be addressed.
The routes used to view events don't sufficiently guard access for non-privileged users. Specifically, a user with the 'View own' permission for bat events can view others' events as well.
Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

DRUPAL-CONTRIB-2019-074

Affected Products

Drupal/Bat