Skip to content
OpenAdvisories
Unscored DRUPAL-CORE-2023-003

The language module provides a Language switcher block which can be placed to provide links to quickly switch between different languages. …

Published Mar 15, 2023 · Updated Sep 19, 2026 · Assigned by DRUPAL

Description

The language module provides a Language switcher block which can be placed to provide links to quickly switch between different languages.

The URL of unpublished translations may be disclosed. When used in conjunction with a module like Pathauto, this may reveal the title of unpublished content.

This advisory is not covered by [Drupal Steward](/steward).

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/core >= 8.0.0, < 9.4.12 · >= 9.5.0, < 9.5.5 · >= 10.0.0, < 10.0.5 9.4.12, 9.5.5, 10.0.5 DRUPAL-CORE-2023-003

References