IP-DB.com
Türkçe English Deutsch Español
Anmelden API-Schlüssel holen
4.8Mittel

CVE-2026-13237AI Agents - Moderately critical - Information disclosure, Access bypass - SA-CONTRIB-2026-057

Drupal AI Agents Veröffentlicht: (vor 4 Monaten)

Beschreibung

Incorrect Authorization vulnerability in Drupal AI Agents allows Forceful Browsing. This issue affects AI Agents versions: from 0.0.0 to 1.1.4, from 1.2.0 to 1.2.5, from 1.3.0 to 1.3.1.

Schwachstellentyp (CWE): CWE-863

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
artificial intelligence project artificial intelligence < 1.1.4
Drupal AI Agents 0.0.0 – < 1.1.4, 1.2.0 – < 1.2.5, 1.3.0 – < 1.3.1

Referenzen und Patches

CPE-Treffer (NVD) (3)
  • cpe:2.3:a:artificial_intelligence_project:artificial_intelligence:*:*:*:*:*:drupal:*:* < 1.1.4
  • cpe:2.3:a:artificial_intelligence_project:artificial_intelligence:*:*:*:*:*:drupal:*:* ≥ 1.2.0 < 1.2.5
  • cpe:2.3:a:artificial_intelligence_project:artificial_intelligence:*:*:*:*:*:drupal:*:* ≥ 1.3.0 < 1.3.1