PT-2019-20542 · Packagist · Drupal/Bat
Published
2019-10-16
·
Updated
2019-10-16
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
The Bat module provides a foundation through which a wide range of availability management, reservation and booking use cases can be addressed.
The routes used to view events don't sufficiently guard access for non-privileged users. Specifically, a user with the 'View own' permission for bat events can view others' events as well.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Drupal/Bat