Threats Tagged 'drupal-contrib-2026-252'
View all threats tagged with 'drupal-contrib-2026-252'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'drupal-contrib-2026-252'
Click on any threat for detailed analysis and mitigation recommendations
The Rabbit Hole module for Drupal allows site builders to control the behavior when an entity's page is viewed, including showing the page, returning access denied or not found responses, or redirecting visitors. Two vulnerabilities exist: one allows bypassing Rabbit Hole behavior with a specific query parameter, letting anonymous users view content meant to be hidden or denied; the other involves insufficient access control on per-entity settings fields, allowing users with entity edit permissions to modify Rabbit Hole settings via alternate write paths. These issues affect versions prior to 1.3.0. Join the discussion | GCVE Database | 10/21/2026, 18:12:28 UTC Added: 10/21/2026, 20:12:23 UTC |
Showing 1 to 1 of 1 result