Skip to content
CVE PROGRAM SOURCE RECORD4.2 Medium

CVE-2026-15083

ECA: Event - Condition - Action - Less critical - Information disclosure - SA-CONTRIB-2026-074

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
drupal

Description

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal ECA: Event - Condition - Action allows Object Injection. This issue affects ECA: Event - Condition - Action versions: from 0.0.0 to 2.1.20, from 3.0.0 to 3.0.12, from 3.1.0 to 3.1.4.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Drupal ECA: Event - Condition - Action

  • 0.0.0 to < 2.1.20affected
  • 3.0.0 to < 3.0.12affected
  • 3.1.0 to < 3.1.4affected

References