2.7
CVE-2026-8492
- EPSS 0.24%
- Veröffentlicht 19.05.2026 22:29:14
- Zuletzt bearbeitet 27.05.2026 15:15:45
- Quelle mlhess@drupal.org
- CVE-Watchlists
- Unerledigt
Translate Drupal with GTranslate - Less critical - DOM clobbering / link manipulation - SA-CONTRIB-2026-035
Modification of Assumed-Immutable Data (MAID) vulnerability in Drupal Translate Drupal with GTranslate allows Resource Location Spoofing. This issue affects Translate Drupal with GTranslate: from 0.0.0 before 3.0.5.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Gtranslate ≫ Gtranslate SwPlatformdrupal Version < 3.0.5
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.24% | 0.143 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | 2.7 | 1.2 | 1.4 |
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
|
CWE-471 Modification of Assumed-Immutable Data (MAID)
The product does not properly protect an assumed-immutable element from being modified by an attacker.
https://www.drupal.org/sa-contrib-2026-035