Lucene search
+L

3 matches found

Drupal
Drupal
added 2026/06/24 12:0 a.m.14 views

AI (Artificial Intelligence) - Moderately critical - Information Disclosure / Cross-site Scripting - SA-CONTRIB-2026-054

The module and certain submodules AI Automators, AI Translate, AI API Explorer, AI Content Suggestions provide the ability to use an LLM to generate HTML or Markdown and preview it in a browser. Under certain circumstances, rendering of this HTML can lead to Cross Site Scripting, or exposing secr...

6.1CVSS5.9AI score0.00181EPSS
SaveExploits0References4
Drupal
Drupal
added 2025/03/05 12:0 a.m.25 views

AI (Artificial Intelligence) - Moderately critical - Gadget Chain - SA-CONTRIB-2025-022

The AI Automators module a submodule of AI enables you to create different automated tasks that fills out a field data using LLM outputs. The module contains a potential PHP Object Injection vulnerability that if combined with another exploit could lead to Arbitrary File Deletion. It may be...

6.6CVSS8AI score0.00721EPSS
SaveExploits0References2
Drupal
Drupal
added 2025/03/05 12:0 a.m.27 views

AI (Artificial Intelligence) - Critical - Remote Code Execution - SA-CONTRIB-2025-021

The AI Automators module a submodule of AI enables you to create different automated tasks that fills out field data using LLM outputs. The module doesn't sufficiently sanitize input before passing it to the underlying shell as part of a command for execution, allowing an attacker to run arbitrar...

7.5CVSS7.3AI score0.00717EPSS
SaveExploits0References2
Rows per page
Query Builder