[Security-news] Entity Backup - Critical - Module Unsupported - SA-CONTRIB-2018-012

[security-news at drupal.org]

View online: https://www.drupal.org/sa-contrib-2018-012

Project: Entity Backup [1]
Date: 2018-February-14
Security risk: *Critical* 18∕25
AC:None/A:None/CI:Some/II:Some/E:Proof/TD:Default [2]
Vulnerability: Module Unsupported

Description: 
The main purpose of the Entity Backup module is to keep a backup of deleted
Drupal core entities and perform recovery of them.

The security team is marking this module unsupported.  There is a known
security issue with the module that has not been fixed by the maintainer.  If
you would like to maintain this module, please read:
https://www.drupal.org/node/251466 [3]

Solution: 
Uninstall the module

Reported By: 
Jean-Francois Hovinne [4]

Fixed By: 
N/A

Coordinated By: 
N/A


[1] https://www.drupal.org/project/entity_backup
[2] https://www.drupal.org/security-team/risk-levels
[3] https://www.drupal.org/node/251466
[4] https://www.drupal.org/u/jfhovinne