CNNVD-202602-568 Information

CNNVD ID

CNNVD-202602-568

CVE-2026-1553

  • CNNVD Published: 2026-02-04

Description (Chinese)

Drupal Canvas是Drupal公司的一个页面构建器。 Drupal Canvas 1.0.4之前版本存在安全漏洞,该漏洞源于授权不当,可能导致强制浏览。

Description (English)

Drupal Canvas is a page builder for Drupal. There was a security loophole in the pre-Drupal Canvas version of 1.0.4, which stemmed from inappropriate authorization and could lead to forced browsing.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

Drupal

Published

2026-02-04

Last Modified

2026-02-24

References

https://www.drupal.org/sa-contrib-2026-006

Patch

https://www.drupal.org/project/canvas

Share on: