69244 matches found
CVE-2026-114541
Cross-Site Request Forgery CSRF vulnerability in Drupal Frontend Editing allows Cross Site Request Forgery. This issue affects Frontend Editing versions: from 0.0.0 to 1.9.3...
CVE-2026-107262
Cross-Site Request Forgery CSRF vulnerability in Drupal Advanced Filesystem allows Cross Site Request Forgery. This issue affects Advanced Filesystem versions: from 0.0.0 to 1.0.28...
CVE-2026-107262 Advanced Filesystem - Moderately critical - Cross-Site Request Forgery - SA-CONTRIB-2026-217
Cross-Site Request Forgery CSRF vulnerability in Drupal Advanced Filesystem allows Cross Site Request Forgery. This issue affects Advanced Filesystem versions: from 0.0.0 to 1.0.28...
CVE-2026-107262
The Advanced Filesystem module for Drupal is affected by a Cross-Site Request Forgery (CSRF) vulnerability (CVE-2026-107262) in versions 0.0.0 to 1.0.28 . The root cause is that the Advanced Filesystem: Backup submodule fails to sufficiently validate certain requests. An attacker could trick an a...
EUVD-2026-113558
Cross-Site Request Forgery CSRF vulnerability in Drupal Advanced Filesystem allows Cross Site Request Forgery. This issue affects Advanced Filesystem versions: from 0.0.0 to 1.0.28...
CVE-2026-107262 Advanced Filesystem - Moderately critical - Cross-Site Request Forgery - SA-CONTRIB-2026-217
Cross-Site Request Forgery CSRF vulnerability in Drupal Advanced Filesystem allows Cross Site Request Forgery. This issue affects Advanced Filesystem versions: from 0.0.0 to 1.0.28...
CVE-2026-107262 Advanced Filesystem - Moderately critical - Cross-Site Request Forgery - SA-CONTRIB-2026-217
Cross-Site Request Forgery CSRF vulnerability in Drupal Advanced Filesystem allows Cross Site Request Forgery. This issue affects Advanced Filesystem versions: from 0.0.0 to 1.0.28...
EUVD-2026-113532
Cross-Site Request Forgery CSRF vulnerability in Drupal Frontend Editing allows Cross Site Request Forgery. This issue affects Frontend Editing versions: from 0.0.0 to 1.9.3...
CVE-2026-114541 Frontend Editing - Moderately critical - Cross-Site Request Forgery (CSRF) - SA-CONTRIB-2026-240
Cross-Site Request Forgery CSRF vulnerability in Drupal Frontend Editing allows Cross Site Request Forgery. This issue affects Frontend Editing versions: from 0.0.0 to 1.9.3...
CVE-2026-114541 Frontend Editing - Moderately critical - Cross-Site Request Forgery (CSRF) - SA-CONTRIB-2026-240
Cross-Site Request Forgery CSRF vulnerability in Drupal Frontend Editing allows Cross Site Request Forgery. This issue affects Frontend Editing versions: from 0.0.0 to 1.9.3...
CVE-2026-114541
The Drupal Frontend Editing module (versions 0.0.0 to 1.9.3 ) is vulnerable to a Cross-Site Request Forgery (CSRF) . The root cause is a failure to sufficiently protect routes used to delete and reorder paragraphs on a rendered page. An attacker could trick a logged-in editor with the necessary p...
CVE-2026-114541
Cross-Site Request Forgery CSRF vulnerability in Drupal Frontend Editing allows Cross Site Request Forgery. This issue affects Frontend Editing versions: from 0.0.0 to 1.9.3...
CVE-2026-118543 Commerce Core - Moderately critical - Cross-site request forgery - SA-CONTRIB-2026-258
Cross-Site Request Forgery CSRF vulnerability in Drupal Commerce Core allows Cross Site Request Forgery. This issue affects Commerce Core versions: from 0.0.0 to 2.41.0, from 3.0.0 to 3.3.13...
CVE-2026-118543
Cross-Site Request Forgery CSRF vulnerability in Drupal Commerce Core allows Cross Site Request Forgery. This issue affects Commerce Core versions: from 0.0.0 to 2.41.0, from 3.0.0 to 3.3.13...
CVE-2026-118543
Drupal Commerce Core is vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability. The issue stems from the inbox routes on the Commerce dashboard failing to verify CSRF tokens . An attacker could trick a user with "access commerce administration pages" permissions into visiting a malicious...
EUVD-2026-113514
Cross-Site Request Forgery CSRF vulnerability in Drupal Commerce Core allows Cross Site Request Forgery. This issue affects Commerce Core versions: from 0.0.0 to 2.41.0, from 3.0.0 to 3.3.13...
CVE-2026-118558
The Drupal Commerce Stripe module (versions 2.0.0 to 2.2.3 ) is vulnerable to a Cross-Site Request Forgery (CSRF) . The root cause is the failure to incorporate a CSRF token into the return URI when redirecting to Stripe Connect to generate an authorization code. An attacker could trick an admini...
CVE-2026-118558 Commerce Stripe - Critical - Cross-site request forgery - SA-CONTRIB-2026-263
Cross-Site Request Forgery CSRF vulnerability in Drupal Commerce Stripe allows Cross Site Request Forgery. This issue affects Commerce Stripe versions: from 2.0.0 to 2.2.3...