CVE-2026-114535
CVE-2026-114535 · DRUPAL-CONTRIB-2026-233
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
Swiper is mobile first, layout and gestures wise, it provides great amount of options for designing your own widget and related events. This module provides a route for displaying published content entities in a dialog. The route does not sufficiently verify the current user's access to the specific entity. This vulnerability is mitigated by the fact that only rendered output is returned, and field-level access controls are still enforced.
Correctif disponible
- Publication
- Mise à jour
Pile logicielle: php
Produits et versions concernés
drupal/swiper_formatter Packagist:https://packages.drupal.org/8
- Plages de versions concernées
- ECOSYSTEM: < 2.1.2
- ECOSYSTEM: ≥ 3.0.1, < 3.1.0
Mettez à jour vers 2.1.2; Mettez à jour vers 3.1.0