Threats tagged 'drupal-contrib-2026-279'

The S3 File System (s3fs) module for Drupal allows storing files in Amazon S3 but has a vulnerability where upload contexts are not sufficiently isolated between file operations in the same request. This can lead to files being uploaded with incorrect access control lists or corrupted metadata. Exploitation requires triggering multiple file operations. Certain configurations and hooks mitigate known attack vectors. A fix is available in version 3.12.0.