CVE-2026-87954

This module adds automatic highlighting of taxonomy terms in content. The module doesn't sufficiently check access on taxonomy terms. As a result, an...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

This module adds automatic highlighting of taxonomy terms in content.

The module doesn't sufficiently check access on taxonomy terms. As a result, anonymous users can view any of the site's taxonomy terms at the module's JSON endpoint, including taxonomy terms that are unpublished or otherwise restricted.

出典: OSV.dev (Open Source Vulnerabilities) NVD OSV

影響パッケージ

Packagist:https://packages.drupal.org/8 drupal/term_glossary

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.0"}],"database_specific":{"constraint":"<4.6.0"}}]

参照URL

web drupal.org