6 matches found
CVE-2026-118584
Incorrect Authorization vulnerability in Drupal Field Permissions allows Forceful Browsing. This issue affects Field Permissions versions: from 0.0.0 to 1.6.0...
CVE-2026-118583
Incorrect Authorization vulnerability in Drupal Field Permissions allows Forceful Browsing. This issue affects Field Permissions versions: from 0.0.0 to 1.6.0...
CVE-2026-118583
The Field Permissions module for Drupal (versions 0.0.0 to 1.6.0 ) contains an Incorrect Authorization vulnerability (CWE-863) that allows for Forceful Browsing . The module fails to sufficiently verify administrative privileges when checking access to protected fields. This could allow users wit...
EUVD-2026-113686
Incorrect Authorization vulnerability in Drupal Field Permissions allows Forceful Browsing. This issue affects Field Permissions versions: from 0.0.0 to 1.6.0...
CVE-2026-118584
The Field Permissions module for Drupal (versions 0.0.0 to 1.6.0) contains an Incorrect Authorization vulnerability. The module fails to sufficiently restrict access to fields configured with the Private setting on entity types that lack an author field (such as a user account or owner). This all...