The Navigate module for Drupal does not properly check permissions, which allows remote authenticated users to modify custom widgets and create widget database records by leveraging the navigate view permission.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Navigate | Navigate_project | - (including) | - (including) |