CVE-2026-84913
This module enables you to automatically translate entities. The module doesn't sufficiently check access on the entity to be translated, related fie...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
This module enables you to automatically translate entities.
The module doesn't sufficiently check access on the entity to be translated, related fields or referenced entities when performing an AI translation on an entity or when those fields / entities have a different access level than the parent entity. This permission bypass is only applicable to the translate operation - no unwarranted read or update access is granted to the affected entities
影響パッケージ
Packagist:https://packages.drupal.org/8
drupal/ai_translate
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2"}],"database_specific":{"constraint":"<1.3.2"}},{"type":"ECOSYSTEM","events":[{"introduced":"1.4.0"},{"fixed":"1.4.1"}],"database_specific":{"constraint":">=1.4.0 <1.4.1"}}]
参照URL
- web drupal.org