4.3

CVE-2026-15080

Ray Enterprise Translation - Moderately critical - Cross site request forgery - SA-CONTRIB-2026-071

Cross-Site Request Forgery (CSRF) vulnerability in Drupal Ray Enterprise Translation allows Cross Site Request Forgery. This issue affects Ray Enterprise Translation versions: from 0.0.0 to 4.0.4, from 4.1.0 to 4.1.4, from 11.0.0 to 11.0.4.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Lingotek ≫ Ray Enterprise Translation SwPlatformdrupal Version >= 1.0 < 4.0.4
Lingotek ≫ Ray Enterprise Translation SwPlatformdrupal Version >= 4.1.0 < 4.1.4
Lingotek ≫ Ray Enterprise Translation SwPlatformdrupal Version >= 6.x-1.0 <= 6.x-1.40
Lingotek ≫ Ray Enterprise Translation SwPlatformdrupal Version >= 7.x-1.0 <= 7.x-7.47
Lingotek ≫ Ray Enterprise Translation SwPlatformdrupal Version >= 11.0.0 < 11.0.4
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.12% 0.02
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
CISA-ADP 4.3 2.8 1.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
CWE-352 Cross-Site Request Forgery (CSRF)

The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.

https://www.drupal.org/sa-contrib-2026-071
Vendor Advisory