Analysis and contextual insights are available on OpenCVE Cloud.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
No advisories yet.
| Link | Providers |
|---|---|
| https://www.drupal.org/sa-contrib-2026-292 |
|
Fri, 30 Oct 2026 03:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Media Alias Display allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Media Alias Display versions: from 0.0.0 to 2.1.3, from 3.0.0 to 3.0.3. | |
| Title | Media Alias Display - Moderately critical - Information disclosure - SA-CONTRIB-2026-292 | |
| Weaknesses | CWE-525 | |
| References |
|
Subscriptions
No data.
Status: PUBLISHED
Assigner: drupal
Published:
Updated: 2026-10-30T03:08:33.262Z
Reserved: 2026-10-28T15:50:46.720Z
Link: CVE-2026-118571
No data.
Status : Received
Published: 2026-10-30T04:18:23.110
Modified: 2026-10-30T04:18:23.110
Link: CVE-2026-118571
No data.
OpenCVE Enrichment
No data.
-
CWE-525
Use of Web Browser Cache Containing Sensitive Information