CVE-2026-107262
Advanced File System turns Drupal's file storage into a manageable, observable and maintainable subsystem. The Advanced Filesystem: Backup submodule...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Advanced File System turns Drupal's file storage into a manageable, observable and maintainable subsystem.
The Advanced Filesystem: Backup submodule does not sufficiently validate certain requests. This may allow an attacker to trick an authenticated user into performing unintended actions through a Cross-Site Request Forgery (CSRF) vulnerability.
The vulnerability is mitigated by the fact that advanced_filesystem_backup module must be enabled.
Paquets affectés
Packagist:https://packages.drupal.org/8
drupal/advanced_filesystem
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28"}],"database_specific":{"constraint":"<1.0.28"}}]
Références
- web drupal.org