PT-2026-76592
CVE-2026-73478
·
تاريخ النشر
2026-08-12
·
تاريخ التحديث
2026-09-02
الوصف من
CVSS 3.1
5.3
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Drupal Diff versions 0.0.0 through 2.0.1
Drupal Diff versions 2.1.0 through 2.1.1
Description
An incorrect authorization issue allows forceful browsing. The module does not sufficiently restrict access to non-node entity revision diffs. This requires the attacker to possess a role with permission to view the entity.
Recommendations
Update Drupal Diff versions 0.0.0 through 2.0.1 to a fixed version.
Update Drupal Diff versions 2.1.0 through 2.1.1 to a fixed version.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾