IP-DB.com
Türkçe English Deutsch Español
Anmelden API-Schlüssel holen
6.1Mittel

CVE-2026-58587Drupal Canvas - Moderately critical - Improper validation - SA-CONTRIB-2026-065

Drupal Drupal Canvas Veröffentlicht: (vor 4 Monaten)

Beschreibung

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal Canvas allows Cross-Site Scripting (XSS). This issue affects Drupal Canvas versions: from 0.0.0 to 1.4.2, from 1.5.0 to 1.5.2, from 1.6.0 to 1.6.1, from 1.7.0 to 1.7.1.

Schwachstellentyp (CWE): CWE-79

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
Drupal Drupal Canvas 0.0.0 – < 1.4.2, 1.5.0 – < 1.5.2, 1.6.0 – < 1.6.1, 1.7.0 – < 1.7.1
drupal canvas project drupal canvas < 1.4.2

Referenzen und Patches

CPE-Treffer (NVD) (4)
  • cpe:2.3:a:drupal_canvas_project:drupal_canvas:*:*:*:*:*:drupal:*:* < 1.4.2
  • cpe:2.3:a:drupal_canvas_project:drupal_canvas:*:*:*:*:*:drupal:*:* ≥ 1.5.0 < 1.5.2
  • cpe:2.3:a:drupal_canvas_project:drupal_canvas:*:*:*:*:*:drupal:*:* ≥ 1.6.0 < 1.6.1
  • cpe:2.3:a:drupal_canvas_project:drupal_canvas:*:*:*:*:*:drupal:*:* ≥ 1.7.0 < 1.7.1