p PatchFirst

CVE-2026-107309

CVE-2026-107309 · DRUPAL-CONTRIB-2026-212

Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.

This module enables you to show a breadcrumb trail for taxonomy term hierarchies. The module doesn't sufficiently check for view access of parent terms before rendering the crumb segment. This vulnerability is mitigated by the fact that the setting "Add parent hierarchy" (term\_hierarchy) must be enabled, and at least one term has a term in the parent hierarchy that is unpublished.

Correctif disponible

Publication
Mise à jour

Pile logicielle: php

Produits et versions concernés

  • drupal/easy_breadcrumb Packagist:https://packages.drupal.org/8

    Plages de versions concernées
    • ECOSYSTEM: < 2.0.11

    Mettez à jour vers 2.0.11

Sources originales

Vérifiez votre serveur →