30 matches found
CVE-2026-107310
Server-Side Request Forgery SSRF vulnerability in Drupal Freelinking allows Server Side Request Forgery. This issue affects Freelinking versions: from 0.0.0 to 4.0.3...
CVE-2026-107310 Freelinking - Moderately critical - Information Disclosure - SA-CONTRIB-2026-213
Server-Side Request Forgery SSRF vulnerability in Drupal Freelinking allows Server Side Request Forgery. This issue affects Freelinking versions: from 0.0.0 to 4.0.3...
CVE-2026-107310
The Drupal Freelinking module (versions 0.0.0 to 4.0.3 ) is vulnerable to a Server-Side Request Forgery (SSRF) , specifically DRUPAL-CONTRIB-2026-213 . The root cause is that the module fails to sufficiently prevent page titles from being viewed for certain privately-accessible URLs. This allows ...
CVE-2026-107310 Freelinking - Moderately critical - Information Disclosure - SA-CONTRIB-2026-213
Server-Side Request Forgery SSRF vulnerability in Drupal Freelinking allows Server Side Request Forgery. This issue affects Freelinking versions: from 0.0.0 to 4.0.3...
EUVD-2026-113562
Server-Side Request Forgery SSRF vulnerability in Drupal Freelinking allows Server Side Request Forgery. This issue affects Freelinking versions: from 0.0.0 to 4.0.3...
CVE-2026-107310 Freelinking - Moderately critical - Information Disclosure - SA-CONTRIB-2026-213
Server-Side Request Forgery SSRF vulnerability in Drupal Freelinking allows Server Side Request Forgery. This issue affects Freelinking versions: from 0.0.0 to 4.0.3...
CVE-2026-107310: Drupal Freelinking: Server-Side Request Forgery (SSRF) vulnerability in Drupal Freelinking allows Server Side Request Forgery
Server-Side Request Forgery SSRF vulnerability in Drupal Freelinking allows Server Side Request Forgery. This issue affects Freelinking versions: from 0.0.0 to 4.0.3...
DRUPAL-CONTRIB-2026-213
This module enables you to configure a WIKI-like input filter that allows users to create links to site and external content. The module doesn’t sufficiently prevent page titles being viewed for certain privately-accessible URLs. This vulnerability is mitigated by the fact that an attacker must...
Freelinking - Moderately critical - Information Disclosure - SA-CONTRIB-2026-213
This module enables you to configure a WIKI-like input filter that allows users to create links to site and external content. The module doesn’t sufficiently prevent page titles being viewed for certain privately-accessible URLs. This vulnerability is mitigated by the fact that an attacker must...
PT-2026-107764
This module enables you to configure a WIKI-like input filter that allows users to create links to site and external content. The module doesn’t sufficiently prevent page titles being viewed for certain privately-accessible URLs. This vulnerability is mitigated by the fact that an attacker must...
EUVD-2014-5077
Malware in sbrugna...
EUVD-2024-51484
Malicious code in bioql PyPI...
Freelinking Module Drupal Auth Bypass Forceful Browsing
The vulnerability of the Freelinking module in the Drupal CMS system is related to improper authentication. Exploiting this vulnerability allows a malicious actor to disclose protected information and execute a Forceful Browsing attack...
CVE-2024-13270
Incorrect Authorization vulnerability in Drupal Freelinking allows Forceful Browsing.This issue affects Freelinking: from 0.0.0 before 4.0.1...
CVE-2024-13270 Freelinking - Moderately critical - Information Disclosure - SA-CONTRIB-2024-034
Incorrect Authorization vulnerability in Drupal Freelinking allows Forceful Browsing.This issue affects Freelinking: from 0.0.0 before 4.0.1...
CVE-2024-13270
The Freelinking module for the Drupal CMS is affected by an Incorrect Authorization vulnerability (CVE-2024-13270) in versions 0.0.0 through 4.0.0 . The root cause is that the module fails to sufficiently check if a user has access to specific URLs before rendering them as links. This allows a re...
CVE-2024-13270 Freelinking - Moderately critical - Information Disclosure - SA-CONTRIB-2024-034
Incorrect Authorization vulnerability in Drupal Freelinking allows Forceful Browsing.This issue affects Freelinking: from 0.0.0 before 4.0.1...
CVE-2024-13270 Freelinking - Moderately critical - Information Disclosure - SA-CONTRIB-2024-034
Incorrect Authorization vulnerability in Drupal Freelinking allows Forceful Browsing.This issue affects Freelinking: from 0.0.0 before 4.0.1...
CVE-2024-13270: Incorrect Authorization
Incorrect Authorization vulnerability in Drupal Freelinking allows Forceful Browsing.This issue affects Freelinking: from 0.0.0 before 4.0.1...
Drupal security vulnerabilities
Drupal is an open source content management system developed in the PHP language by the Drupal community. A security vulnerability exists in Drupal Freelinking prior to version 4.0.1, which stems from the inclusion of an authorization error vulnerability...