https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 22:38:46 +0000 https://cve.radiocsirt.org/vuln/bit-drupal-2023-5256 <p><strong>Affected:</strong> Bitnami: drupal</p> <p>In certain scenarios, Drupal&#39;s JSON:API module will output error backtraces. With some configurations, this may cause sensitive information to be cached and made available to anonymous users, leading to privilege escalation.</p> <p>This vulnerability only affects sites with the JSON:API module enabled, and can be mitigated by uninstalling JSON:API.</p> <p>The core REST and contributed GraphQL modules are not affected.</p> <p><strong>Affected:</strong> Bitnami: drupal</p> <p>In certain scenarios, Drupal&#39;s JSON:API module will output error backtraces. With some configurations, this may cause sensitive information to be cached and made available to anonymous users, leading to privilege escalation.</p> <p>This vulnerability only affects sites with the JSON:API module enabled, and can be mitigated by uninstalling JSON:API.</p> <p>The core REST and contributed GraphQL modules are not affected.</p> https://cve.radiocsirt.org/vuln/bit-drupal-2023-5256 https://cve.radiocsirt.org/vuln/euvd-2026-187246 EUVD-2026-187246 https://cve.radiocsirt.org/vuln/euvd-2026-187246 https://cve.radiocsirt.org/vuln/fkie_cve-2023-5256 <p>In certain scenarios, Drupal&#39;s JSON:API module will output error backtraces. With some configurations, this may cause sensitive information to be cached and made available to anonymous users, leading to privilege escalation.</p> <p>This vulnerability only affects sites with the JSON:API module enabled, and can be mitigated by uninstalling JSON:API.</p> <p>The core REST and contributed GraphQL modules are not affected.</p> <p>In certain scenarios, Drupal&#39;s JSON:API module will output error backtraces. With some configurations, this may cause sensitive information to be cached and made available to anonymous users, leading to privilege escalation.</p> <p>This vulnerability only affects sites with the JSON:API module enabled, and can be mitigated by uninstalling JSON:API.</p> <p>The core REST and contributed GraphQL modules are not affected.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-5256 https://cve.radiocsirt.org/vuln/ghsa-rjqg-3h9m-fx5x <p><strong>Affected:</strong> Packagist: drupal/core</p> <p>In certain scenarios, Drupal&#39;s JSON:API module will output error backtraces. With some configurations, this may cause sensitive information to be cached and made available to anonymous users, leading to privilege escalation.</p> <p>This vulnerability only affects sites with the JSON:API module enabled, and can be mitigated by uninstalling JSON:API.</p> <p>The core REST and contributed GraphQL modules are not affected.</p> <p><strong>Affected:</strong> Packagist: drupal/core</p> <p>In certain scenarios, Drupal&#39;s JSON:API module will output error backtraces. With some configurations, this may cause sensitive information to be cached and made available to anonymous users, leading to privilege escalation.</p> <p>This vulnerability only affects sites with the JSON:API module enabled, and can be mitigated by uninstalling JSON:API.</p> <p>The core REST and contributed GraphQL modules are not affected.</p> https://cve.radiocsirt.org/vuln/ghsa-rjqg-3h9m-fx5x https://cve.radiocsirt.org/vuln/gsd-2023-5256 gsd-2023-5256 https://cve.radiocsirt.org/vuln/gsd-2023-5256 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-5256 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: drupal7, Ubuntu:Pro:16.04:LTS: drupal7</p> <p>In certain scenarios, Drupal&#39;s JSON:API module will output error backtraces. With some configurations, this may cause sensitive information to be cached and made available to anonymous users, leading to privilege escalation. This vulnerability only affects sites with the JSON:API module enabled, and can be mitigated by uninstalling JSON:API. The core REST and contributed GraphQL modules are not affected.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: drupal7, Ubuntu:Pro:16.04:LTS: drupal7</p> <p>In certain scenarios, Drupal&#39;s JSON:API module will output error backtraces. With some configurations, this may cause sensitive information to be cached and made available to anonymous users, leading to privilege escalation. This vulnerability only affects sites with the JSON:API module enabled, and can be mitigated by uninstalling JSON:API. The core REST and contributed GraphQL modules are not affected.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-5256 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2410 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Drupal ausnutzen, um Informationen offenzulegen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Drupal ausnutzen, um Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2410