Vulnerabilidades de Drupal Canvas Project
CVEs publicadas que afetam produtos de Drupal Canvas Project: 4 registro(s), com severidade, exploração e correções.
CVE-2026-58588
Média · 6.1
CWE-79 10/07/2026
Cross-site Scripting (XSS) em Drupal Canvas Project Drupal Canvas
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal Canvas allows Cross-Site Scripting (XSS). This issue affects Drupal Canvas versions: from 0.0.0 to 1.4.2, from 1.5.0 to 1.5.2, from 1.6.0 to 1.6.1, from 1.7.0 to 1.7.1.
CVE-2026-58587
Média · 6.1
CWE-79 10/07/2026
Cross-site Scripting (XSS) em Drupal Canvas Project Drupal Canvas
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal Canvas allows Cross-Site Scripting (XSS). This issue affects Drupal Canvas versions: from 0.0.0 to 1.4.2, from 1.5.0 to 1.5.2, from 1.6.0 to 1.6.1, from 1.7.0 to 1.7.1.
CVE-2026-3216
Média · 5.0
CWE-918 25/03/2026
Drupal Canvas - Moderately critical - Server-side request forgery, Information disclosure - SA-CONTRIB-2026-017
Server-Side Request Forgery (SSRF) vulnerability in Drupal Drupal Canvas allows Server Side Request Forgery.This issue affects Drupal Canvas: from 0.0.0 before 1.1.1.
CVE-2026-1553
Média · 4.8
CWE-863 04/02/2026
Drupal Canvas - Moderately critical - Access bypass - SA-CONTRIB-2026-006
Incorrect Authorization vulnerability in Drupal Drupal Canvas allows Forceful Browsing.This issue affects Drupal Canvas: from 0.0.0 before 1.0.4.