Skip to content
OpenAdvisories
Medium · 5.3 CVE-2026-107262 DRUPAL-CONTRIB-2026-217EUVD-2026-113558GHSA-853x-gq38-fjm7

Advanced Filesystem - Moderately critical - Cross-Site Request Forgery - SA-CONTRIB-2026-217

Published Oct 30, 2026 · Updated Oct 30, 2026 · Assigned by drupal

Description

Cross-Site Request Forgery (CSRF) vulnerability in Drupal Advanced Filesystem allows Cross Site Request Forgery. This issue affects Advanced Filesystem versions: from 0.0.0 to 1.0.28.

Affected products

VendorProductAffectedFixed
Drupal Advanced Filesystem 0.0.0 – < 1.0.28 1.0.28

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/advanced_filesystem < 1.0.28 1.0.28 DRUPAL-CONTRIB-2026-217

Advisories 1

References