Skip to content
OpenAdvisories
Medium · 5.3 CVE-2026-81269 DRUPAL-CONTRIB-2026-108EUVD-2026-70003GHSA-rq35-w8f7-p43g

Data field - Moderately critical - Information disclosure - SA-CONTRIB-2026-108

Published Sep 2, 2026 · Updated Sep 2, 2026 · Assigned by drupal

Vendor: Drupal Product: Data field Package: drupal/datafield Ecosystem: Packagist

Description

Missing Authorization vulnerability in Drupal Data field allows Forceful Browsing. This issue affects Data field versions: from 0.0.0 to 2.0.13.

Affected products

VendorProductAffectedFixed
Drupal Data field 0.0.0 – < 2.0.13 2.0.13

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/datafield < 2.0.13 2.0.13 DRUPAL-CONTRIB-2026-108

Advisories 1

References