Summary
Ein Angreifer kann mehrere Schwachstellen in verschiedenen Drupal Erweiterungen ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren und offenzulegen oder Cross-Site-Scripting-Angriffe durchzuführen.
Product
Drupal ist ein freies Content-Management-System, basierend auf der Scriptsprache PHP und einer SQL-Datenbank. Über zahlreiche Extensions kann der Funktionsumfang der Core-Installation individuell erweitert werden.
Vulnerabilities 22
-
Unscored —
Paragraphs Edit adds contextual edit, clone, and delete links, along with the required routes, to individual Paragraphs…
-
Unscored —
The Texts module provides key-based strings and translations for Drupal, including Twig filters for displaying translat…
-
Unscored —
The Texts module provides key-based strings and translations for Drupal and tools for managing them. The module does no…
-
Unscored —
This module enables you to require a second authentication factor (a time-based one-time password from an authenticator…
-
Unscored —
This module enables you to require a second authentication factor (a time-based one-time password from an authenticator…
-
Unscored —
This module enables you to require a second authentication factor (a time-based one-time password from an authenticator…
-
Unscored —
This module enables you to sell licenses that grant access to resources (such as roles) through Drupal Commerce. The mo…
-
Unscored —
This module enables you to sell licenses (such as roles or files) using Drupal Commerce. The module doesn't sufficientl…
-
Unscored —
This module enables you to provide a way to embed parapraphs in any rich-text field using the WYSIWYG editor. The modul…
-
Unscored —
This module integrates the Campaign Monitor API into Drupal so that users can subscribe and unsubscribe for your Campai…
-
Unscored —
This module enables you to print and export Drupal entities to PDF and other formats, using print engines such as Dompd…
-
Unscored —
This module enables you to accept online payments on your website using Mollie. This module doesn't sufficiently valida…
-
Unscored —
This module enables you to accept online payments on your website using Mollie. In some cases the Mollie secret token c…
-
Unscored —
This module enables you to create custom pages and to override existing paths, such as node or user pages, with variant…
-
Unscored —
This module tracks file downloads for private files and provides reports about them. The module provides the permission…
-
Unscored —
This module implements a field formatter for text fields that improves the *Summary or Trimmed* formatter built into Dr…
-
Unscored —
The Commerce sermpea module provides Commerce support for Spanish banks that use Sermepa/Redsys systems. The module doe…
-
Unscored —
This module renders Layout Builder forms inside an iframe in a modal dialog, using the admin theme. The module provides…
-
Unscored —
This module enables you to display users by a configurable "real name" pattern built from tokens, instead of by their u…
-
Unscored —
The S3 File System CORS Upload module lets users upload files straight from the browser to Amazon S3 (or an S3-compatib…
-
Unscored —
This module adds large file, multiple file, and resumable uploads to the File and Image field widgets. The module doesn…
-
Unscored —
This module provides a field type for storing structured data with multiple sub-fields, along with several widgets incl…
Revision history
-
#1
Initiale Fassung
References
-
Drupal Security Advisory sa-contrib-2026-317 vom 2026-11-11
https://www.drupal.org/sa-contrib-2026-317
-
Drupal Security Advisory sa-contrib-2026-318 vom 2026-11-11
https://www.drupal.org/sa-contrib-2026-318
-
Drupal Security Advisory sa-contrib-2026-319 vom 2026-11-11
https://www.drupal.org/sa-contrib-2026-319
-
Drupal Security Advisory sa-contrib-2026-320 vom 2026-11-11
https://www.drupal.org/sa-contrib-2026-320
-
Drupal Security Advisory sa-contrib-2026-321 vom 2026-11-11
https://www.drupal.org/sa-contrib-2026-321
-
Drupal Security Advisory sa-contrib-2026-322 vom 2026-11-11
https://www.drupal.org/sa-contrib-2026-322
-
Drupal Security Advisory sa-contrib-2026-323 vom 2026-11-11
https://www.drupal.org/sa-contrib-2026-323
-
Drupal Security Advisory sa-contrib-2026-324 vom 2026-11-11
https://www.drupal.org/sa-contrib-2026-324
-
Drupal Security Advisory sa-contrib-2026-325 vom 2026-11-11
https://www.drupal.org/sa-contrib-2026-325
-
Drupal Security Advisory sa-contrib-2026-326 vom 2026-11-11
https://www.drupal.org/sa-contrib-2026-326
-
Drupal Security Advisory sa-contrib-2026-327 vom 2026-11-11
https://www.drupal.org/sa-contrib-2026-327
-
Drupal Security Advisory sa-contrib-2026-328 vom 2026-11-11
https://www.drupal.org/sa-contrib-2026-328
-
Drupal Security Advisory sa-contrib-2026-329 vom 2026-11-11
https://www.drupal.org/sa-contrib-2026-329
-
Drupal Security Advisory sa-contrib-2026-330 vom 2026-11-11
https://www.drupal.org/sa-contrib-2026-330
-
Drupal Security Advisory sa-contrib-2026-331 vom 2026-11-11
https://www.drupal.org/sa-contrib-2026-331
-
Drupal Security Advisory sa-contrib-2026-332 vom 2026-11-11
https://www.drupal.org/sa-contrib-2026-332
-
Drupal Security Advisory sa-contrib-2026-333 vom 2026-11-11
https://www.drupal.org/sa-contrib-2026-333
-
Drupal Security Advisory sa-contrib-2026-334 vom 2026-11-11
https://www.drupal.org/sa-contrib-2026-334
-
Drupal Security Advisory sa-contrib-2026-335 vom 2026-11-11
https://www.drupal.org/sa-contrib-2026-335
-
Drupal Security Advisory sa-contrib-2026-336 vom 2026-11-11
https://www.drupal.org/sa-contrib-2026-336
-
Drupal Security Advisory sa-contrib-2026-337 vom 2026-11-11
https://www.drupal.org/sa-contrib-2026-337
-
Drupal Security Advisory sa-contrib-2026-338 vom 2026-11-11
https://www.drupal.org/sa-contrib-2026-338
-
Drupal Security Advisory sa-contrib-2026-339 vom 2026-11-11
https://www.drupal.org/sa-contrib-2026-339