CVE-2026-3527
AJAX Dashboard - Critical - Access bypass - SA-CONTRIB-2026-022
Résumé
AJAX Dashboard - Critical - Access bypass - SA-CONTRIB-2026-022
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Missing Authentication for Critical Function vulnerability in Drupal AJAX Dashboard allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AJAX Dashboard: from 0.0.0 before 3.1.0.
Paquets affectés
Packagist:https://packages.drupal.org/8
drupal/ajax_dashboard
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0"}],"database_specific":{"constraint":"<3.1.0"}}]
Références
- advisory github.com
- advisory nvd.nist.gov
- web drupal.org
- web git.drupalcode.org
- web drupal.org