Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Drupal Metatag module could let attackers alter site data
published 7 years ago
Summary
The Metatag extension for Drupal has a weakness that may let a malicious user modify or inject content without proper permission. This can affect the accuracy of information shown to visitors and potentially expose the site to abuse. Apply the latest updates from Drupal to fix the problem and review your configuration settings.
What to do
- Update drupal drupal/metatag to version 1.8.0.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Packagist:https://packages.drupal.org/8 | drupal | drupal/metatag |
< 1.8.0 Fix: upgrade to 1.8.0
|
Original advisory text
This resolves issues described in [SA-CORE-2019-003](https://www.drupal.org/sa-core-2019-003) for this module. Not all configurations are affected. See [SA-CORE-2019-003](https://www.drupal.org/sa-...
This resolves issues described in [SA-CORE-2019-003](https://www.drupal.org/sa-core-2019-003) for this module. Not all configurations are affected. See [SA-CORE-2019-003](https://www.drupal.org/sa-core-2019-003) for details.
References
Timeline
Published20 Feb 2019
Updated23 Sep 2026
First seen23 Sep 2026
Sources
DRUPAL-CONTRIB-2019-021 · OSV
Track software like this
Free during beta