Search

Find a vulnerability

Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

    Related vulnerabilities

    DRUPAL-CONTRIB-2026-213 (CVE-2026-107310)

    Vulnerability from drupal – Published: 2026-10-07 16:38 – Updated: 2026-10-07 17:15 – Source website
    VLAI
    Details

    This module enables you to configure a WIKI-like input filter that allows users to create links to site and external content.

    The module doesn’t sufficiently prevent page titles being viewed for certain privately-accessible URLs.

    This vulnerability is mitigated by the fact that an attacker must have access to use a text format with the Freelinking plugin configured to allow privately-accessible external URLs to be crawled. Site administrators may want to disable this functionality to evaluate any risk.

    Credits
    Marcus Johansson (marcus_johansson) www.drupal.org/u/marcus_johansson
    References
    To clipboard 

    {
  "affected": [
    {
      "database_specific": {
        "affected_versions": "\u003c4.0.3"
      },
      "package": {
        "ecosystem": "Packagist:https://packages.drupal.org/8",
        "name": "drupal/freelinking"
      },
      "ranges": [
        {
          "database_specific": {
            "constraint": "\u003c4.0.3"
          },
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "severity": []
    }
  ],
  "aliases": [
    "CVE-2026-107310"
  ],
  "credits": [
    {
      "contact": [
        "https://www.drupal.org/u/marcus_johansson"
      ],
      "name": "Marcus Johansson (marcus_johansson)"
    }
  ],
  "details": "This module enables you to configure a WIKI-like input filter that allows users to create links to site and external content.\n\nThe module doesn\u2019t sufficiently prevent page titles being viewed for certain privately-accessible URLs.\n\nThis vulnerability is mitigated by the fact that an attacker must have access to use a text format with the Freelinking plugin configured to allow privately-accessible external URLs to be crawled. Site administrators may want to disable this functionality to evaluate any risk.",
  "id": "DRUPAL-CONTRIB-2026-213",
  "modified": "2026-10-07T17:15:19.000Z",
  "published": "2026-10-07T16:38:21.000Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://www.drupal.org/sa-contrib-2026-213"
    }
  ],
  "schema_version": "1.7.0"
}