IT-Sentinel

« BACK_TO_HOME

PUBLISHED

2026-07-10 22:16

MODIFIED

2026-07-10 22:16

EPSS (Prob. Exploit)

0.22%

Top 87.3%

DATA SOURCES:

NVD 🔗 2026-07-10 CWE MITRE 🔗 2026-11-01 FIRST EPSS 🔗 2026-11-01 OSV 🔗 2026-11-02

> DESCRIPTION

Server-Side Request Forgery (SSRF) vulnerability in Drupal Drupal core allows Server Side Request Forgery. This issue affects Drupal core versions: from 0.0.0 to 10.5.12, from 10.6.0 to 10.6.11, from 11.2.0 to 11.2.14, from 11.3.0 to 11.3.12, from 0.0.0 to 11.0.*, from 0.0.0 to 11.1.*.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> WEAKNESSES

CWE-918

> CWE DETAILED DESCRIPTIONS

CWE-918: Server-Side Request Forgery - The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

Drupal core - Moderately critical - Server-side request forgery - SA-CORE-2026-008

AFFECTED PACKAGES:

Unknown / Unknown

127 versions affected

ALIASES:

BIT-drupal-2026-55807, DRUPAL-CORE-2026-008

> HISTORIQUE DES MODIFICATIONS

Première apparition

10/07/2026 22:16

Source: NVD

📊 ENRICHISSEMENT 01/11/2026 06:59

CWE

Champ modifié: Description CWE

Ancienne valeur:

CWE-918: Server-Side Request Forgery (SSRF) - The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure th...

Nouvelle valeur:

📊 ENRICHISSEMENT 01/08/2026 06:01

CWE