CVE-2026-107309
This module enables you to show a breadcrumb trail for taxonomy term hierarchies. The module doesn't sufficiently check for view access of parent ter...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
This module enables you to show a breadcrumb trail for taxonomy term hierarchies.
The module doesn't sufficiently check for view access of parent terms before rendering the crumb segment.
This vulnerability is mitigated by the fact that the setting "Add parent hierarchy" (term_hierarchy) must be enabled, and at least one term has a term in the parent hierarchy that is unpublished.
影響パッケージ
Packagist:https://packages.drupal.org/8
drupal/easy_breadcrumb
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.11"}],"database_specific":{"constraint":"<2.0.11"}}]
参照URL
- web drupal.org