Vulnerability DRUPAL-CONTRIB-2026-108

Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
1 month ago
August 26, 2026 at 05:37 PM UTC
No summary available
<2.0.13
<2.0.13

Details

This module enables you to store structured data in configurable fields and expose Data Field values through JSON endpoints.

The module doesn't sufficiently check access when returning Data Field values through its JSON endpoint. This may allow anonymous users to access field values belonging to entities they cannot otherwise view, including unpublished content.

Impacted packages

Timeline

Published
1 month ago
August 26, 2026 at 05:37 PM UTC
Last Modified
1 month ago
September 02, 2026 at 07:55 PM UTC