CVE-2026-118574: CVE-2026-118574: hatalı izin ataması

Açıklama (NVD)

Incorrect Permission Assignment for Critical Resource vulnerability in Drupal S3 File System allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects S3 File System versions: from 0.0.0 to 3.12.0.

Özet bilgiler

CVSS v3.1

5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

EPSS

%0,13 (yüzdelik 3)

CWE

CWE-732

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• www.drupal.org
• CWE-732