7.5Hoch

CVE-2026-3573AI (Artificial Intelligence) - Moderately critical - Information Disclosure - SA-CONTRIB-2026-028

Drupal AI (Artificial Intelligence) Veröffentlicht: (vor 7 Monaten)

Beschreibung

Incorrect Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Resource Injection.This issue affects AI (Artificial Intelligence): from 0.0.0 before 1.1.11, from 1.2.0 before 1.2.12.

Schwachstellentyp (CWE): CWE-863

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
artificial intelligence project artificial intelligence < 1.1.11
Drupal AI (Artificial Intelligence) 0.0.0 – < 1.1.11, 1.2.0 – < 1.2.12

Referenzen und Patches

CPE-Treffer (NVD) (2)

  • cpe:2.3:a:artificial_intelligence_project:artificial_intelligence:*:*:*:*:*:drupal:*:* < 1.1.11
  • cpe:2.3:a:artificial_intelligence_project:artificial_intelligence:*:*:*:*:*:drupal:*:* ≥ 1.2.0 < 1.2.12