CVE-2026-96374

Cross-Site Request Forgery CSRF vulnerability in Drupal Project Browser allows Cross Site Request Forgery. This issue affects Project Browser versions: from 0.0.0 to 2.0.3, from 2.1.0 to 2.1.5...

CVE-2026-96374

The Project Browser module for Drupal is vulnerable to a Cross-Site Request Forgery (CSRF) issue. The module fails to sufficiently validate administrative actions, which could allow an attacker to perform unauthorized actions such as applying recipes or enabling modules via the web user interface...

EUVD-2026-107823

Cross-Site Request Forgery CSRF vulnerability in Drupal Project Browser allows Cross Site Request Forgery. This issue affects Project Browser versions: from 0.0.0 to 2.0.3, from 2.1.0 to 2.1.5...

CVE-2026-96374 Project Browser - Critical - Cross-site request forgery - SA-CONTRIB-2026-178

Cross-Site Request Forgery CSRF vulnerability in Drupal Project Browser allows Cross Site Request Forgery. This issue affects Project Browser versions: from 0.0.0 to 2.0.3, from 2.1.0 to 2.1.5...

CVE-2026-96374 Project Browser - Critical - Cross-site request forgery - SA-CONTRIB-2026-178

Cross-Site Request Forgery CSRF vulnerability in Drupal Project Browser allows Cross Site Request Forgery. This issue affects Project Browser versions: from 0.0.0 to 2.0.3, from 2.1.0 to 2.1.5...

Drupal Project Browser cross-site request forgery vulnerability

Drupal Project Browser versions prior to 0.0.0 and 2.0.3, as well as versions prior to 2.1.0 and 2.1.5, contain a cross-site request forgery vulnerability. This vulnerability stems from the system’s susceptibility to cross-site request forgery attacks...

DRUPAL-CONTRIB-2026-178

The Project Browser module enables you to apply recipes and enable modules from the web user interface. The module doesn't sufficiently validate admin actions to protect against cross-site request forgery attacks CSRF...

Project Browser - Critical - Cross-site request forgery - SA-CONTRIB-2026-178

The Project Browser module enables you to apply recipes and enable modules from the web user interface. The module doesn't sufficiently validate admin actions to protect against cross-site request forgery attacks CSRF...

PT-2026-97666

Name of the Vulnerable Software and Affected Versions Drupal Project Browser versions 0.0.0 through 2.0.3 Drupal Project Browser versions 2.1.0 through 2.1.5 Description Cross-Site Request Forgery CSRF occurs when the Project Browser module, which allows applying recipes and enabling modules via...

CVE-2014-9269

Cross-site scripting XSS vulnerability in helperapi.php in MantisBT 1.1.0a1 through 1.2.x before 1.2.18, when Extended project browser is enabled, allows remote attackers to inject arbitrary web script or HTML via the project cookie...

CVE-2014-9269: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in helperapi.php in MantisBT 1.1.0a1 through 1.2.x before 1.2.18, when Extended project browser is enabled, allows remote attackers to inject arbitrary web script or HTML via the project cookie...