Vulnerability DRUPAL-CONTRIB-2026-108
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
1 month ago
August 26, 2026 at 05:37 PM UTC
No summary available
<2.0.13
<2.0.13
Details
This module enables you to store structured data in configurable fields and expose Data Field values through JSON endpoints.
The module doesn't sufficiently check access when returning Data Field values through its JSON endpoint. This may allow anonymous users to access field values belonging to entities they cannot otherwise view, including unpublished content.
References
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
3 hours ago
No summary available
<2.0.14 DRUPAL-CONTRIB-2026-250
<2.0.14 DRUPAL-CONTRIB-2026-250
Unknown
3 years ago
No summary available
<1.0.16 DRUPAL-CONTRIB-2023-040
<1.0.16 DRUPAL-CONTRIB-2023-040
Impacted packages
Timeline
Published
1 month ago
August 26, 2026 at 05:37 PM UTC
Last Modified
1 month ago
September 02, 2026 at 07:55 PM UTC