CVE-2026-0944
Group invite - Moderately critical - Access bypass - SA-CONTRIB-2026-001
Résumé
Group invite - Moderately critical - Access bypass - SA-CONTRIB-2026-001
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal Group invite allows Forceful Browsing.This issue affects Group invite: from 0.0.0 before 2.3.9, from 3.0.0 before 3.0.4, from 4.0.0 before 4.0.4.
Paquets affectés
Packagist:https://packages.drupal.org/8
drupal/ginvite
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.9"}],"database_specific":{"constraint":"<2.3.9"}},{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.0.4"}],"database_specific":{"constraint":">=3.0.0 <3.0.4"}},{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0"},{"fixed":"4.0.4"}],"database_specific":{"constraint":">=4.0.0 <4.0.4"}}]
Références
- advisory github.com
- advisory nvd.nist.gov
- web drupal.org
- web git.drupalcode.org
- web drupal.org