Vulnerability DRUPAL-CONTRIB-2026-297
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
4 hours ago
November 04, 2026 at 05:31 PM UTC
No summary available
<3.0.3
<3.0.3
Details
This module enables you to send messages ("Notifications") to users upon a certain Workflow state change.
The module doesn't sufficiently protect the Notification settings page where an attacker can make unauthorized changes.
References
Impacted packages
Timeline
Published
4 hours ago
November 04, 2026 at 05:31 PM UTC
Last Modified
1 hour ago
November 04, 2026 at 08:30 PM UTC