CVE-2026-107267
CVE-2026-107267 · DRUPAL-CONTRIB-2026-208
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
The DKAN module enables organizations and individuals to build open data portals in Drupal. The DKAN datastore imports tabular data files into database tables and exposes them for querying with a JSON API. The module does not correctly check access for all of its endpoints, leading to a potential access bypass. The vulnerability is mitigated by the fact that it is only impactful for sites that do not give "access content" permission to the anonymous role.
Correctif disponible
- Publication
- Mise à jour
Pile logicielle: php
Produits et versions concernés
drupal/dkan Packagist:https://packages.drupal.org/8
- Plages de versions concernées
- ECOSYSTEM: < 4.0.4
- ECOSYSTEM: ≥ 4.1.0, < 4.1.5
Mettez à jour vers 4.0.4; Mettez à jour vers 4.1.5