CVE-2026-107262
Advanced File System turns Drupal's file storage into a manageable, observable and maintainable subsystem. The Advanced Filesystem: Backup submodule...
Original description
The description as published by the source.
Advanced File System turns Drupal's file storage into a manageable, observable and maintainable subsystem.
The Advanced Filesystem: Backup submodule does not sufficiently validate certain requests. This may allow an attacker to trick an authenticated user into performing unintended actions through a Cross-Site Request Forgery (CSRF) vulnerability.
The vulnerability is mitigated by the fact that advanced_filesystem_backup module must be enabled.
Affected packages
Packagist:https://packages.drupal.org/8
drupal/advanced_filesystem
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28"}],"database_specific":{"constraint":"<1.0.28"}}]
References
- web drupal.org