UNKNOWNDRUPAL-CORE-2023-003
DRUPAL-CORE-2023-003
Platform
drupal
Component
drupal
Fixed in
9.4.12
The language module provides a Language switcher block which can be placed to provide links to quickly switch between different languages. The URL of unpublished translations may be disclosed. When used in conjunction with a module like Pathauto, this may reveal the title of unpublished content. This advisory is not covered by [Drupal Steward](/steward).
How to fix
No official patch available. Check for workarounds or monitor for updates.
Monitor your dependencies automatically
Get notified when new vulnerabilities affect your projects. Free forever.
Start free