CVE-2026-81269
CVE-2026-81269 · Data field - Moderately critical - Information disclosure - SA-CONTRIB-2026-108
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Missing Authorization vulnerability in Drupal Data field allows Forceful Browsing. This issue affects Data field versions: from 0.0.0 to 2.0.13.
CVSS 5.3 · Medium · EPSS 0.3% · Fix available
- Published
- Updated
Stack: php
Affected products and versions
data field
- Versions
- ≥ 0.0.0, < 2.0.13: Affected (semver)
Update to 2.0.13
drupal/datafield Packagist:https://packages.drupal.org/8
- Affected ranges
- ECOSYSTEM: < 2.0.13
Update to 2.0.13