Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2026-84917

Jsonapi Role Access - Critical - Access bypass - SA-CONTRIB-2026-127

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
drupal

Description

Incorrect Authorization vulnerability in Drupal Jsonapi Role Access allows Forceful Browsing. This issue affects Jsonapi Role Access versions: from 0.0.0 to 2.0.2.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Drupal Jsonapi Role Access

  • 0.0.0 to < 2.0.2affected

References