Most recent entries from all

bdu:2025-01112

DRUPAL-CONTRIB-2024-042

Affected: Packagist:https://packages.drupal.org/8: drupal/diff

This module adds a tab for sufficiently permissioned users. The tab shows all revisions like standard Drupal but it also allows pretty viewing of all added/changed/deleted words between revisions.

The module doesn't sufficiently check revision access before rendering a diff report for 1) nodes or 2) general entities that support diff.

This vulnerability is mitigated by the fact that an attacker must have a role with the permission from the general node permission to "view all revisions", one of the more specific node type permissions, "view %bundle revisions" or the equivalent for other general entity types.

EUVD-2026-210016

fkie_cve-2024-13278

Incorrect Authorization vulnerability in Drupal Diff allows Functionality Misuse.This issue affects Diff: from 0.0.0 before 1.8.0.

GHSA-223j-7cj4-4cw7

Incorrect Authorization vulnerability in Drupal Diff allows Functionality Misuse.This issue affects Diff: from 0.0.0 before 1.8.0.

WID-SEC-W-2024-3070 — Drupal: Mehrere Schwachstellen

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Drupal Modulen ausnutzen, um Informationen offenzulegen und Sicherheitsvorkehrungen zu umgehen.