CVE-2026-73478

Incorrect Authorization vulnerability in Drupal Diff allows Forceful Browsing. This issue affects Diff versions: from 0.0.0 to 2.0.1, from 2.1.0 to 2.1.1...

CVE-2026-73478

Drupal Diff is a contrib module that enables viewing differences between revisions on any entity type. It contains an Incorrect Authorization flaw that allows forceful browsing : the module does not sufficiently restrict access to non-node entity revision diffs . The practical impact is that a us...

EUVD-2026-69992

Incorrect Authorization vulnerability in Drupal Diff allows Forceful Browsing. This issue affects Diff versions: from 0.0.0 to 2.0.1, from 2.1.0 to 2.1.1...

CVE-2026-73478 Diff - Moderately critical - Access bypass - SA-CONTRIB-2026-096

Incorrect Authorization vulnerability in Drupal Diff allows Forceful Browsing. This issue affects Diff versions: from 0.0.0 to 2.0.1, from 2.1.0 to 2.1.1...

CVE-2026-73478 Diff - Moderately critical - Access bypass - SA-CONTRIB-2026-096

Incorrect Authorization vulnerability in Drupal Diff allows Forceful Browsing. This issue affects Diff versions: from 0.0.0 to 2.0.1, from 2.1.0 to 2.1.1...

CVE-2026-73478: Incorrect Authorization

Incorrect Authorization vulnerability in Drupal Diff allows Forceful Browsing. This issue affects Diff versions: from 0.0.0 to 2.0.1, from 2.1.0 to 2.1.1...

EUVD-2024-51491

Malicious code in bioql PyPI...

CVE-2024-13278

Incorrect Authorization vulnerability in Drupal Diff allows Functionality Misuse.This issue affects Diff: from 0.0.0 before 1.8.0...

CVE-2024-13278

Incorrect Authorization vulnerability in Drupal Diff allows Functionality Misuse.This issue affects Diff: from 0.0.0 before 1.8.0...

CVE-2024-13278

The Drupal Diff module (versions prior to 1.8.0 ) contains an incorrect authorization vulnerability. The flaw stems from the module failing to sufficiently check revision access before rendering a diff report for nodes or general entities that support diff. A remote attacker who possesses the per...

Drupal 安全漏洞

Drupal is an open source content management system developed in the PHP language by the Drupal community. A security vulnerability exists in Drupal Diff prior to version 1.8.0, which stems from the inclusion of an authorization error vulnerability...