Drupal core - Moderately critical - Server-side request forgery - SA-CORE-2026-008
Project: Drupal core Project machine name: drupal Date: 2026-June-17 Security risk: Moderately critical 10 ∕ 25 AC:Basic/A:User/CI:Some/II:None/E:Theoretical/TD:Default Vulnerability: Server-side request forgery Affected versions: <10.5.12 || >=10.6.0 <10.6.11 || >=11.2.0 <11.2.14 || >=11.3.0 <11.3.12 || 11.0.* || 11.1.* CVE IDs: CVE-2026-55807 Description: The Media module comes with support for oEmbed. The oEmbed specification contains two discovery mechanisms, via providers.json and via URL discovery. The URL discovery code could be leveraged to trick Drupal into making server-side request…
| CVE | CVE-2026-55807 |
|---|---|
| 情報源 | Drupal Security Advisories |
| 取得日時 | 2026/10/22 01:17 |
| データ | Markdown JSON |
2026/06/18 03:57、Drupal Security Advisoriesが「Drupal core - Moderately critical - Server-side request forgery - SA-CORE-2026-008」を公開しました (種別: 脆弱性アドバイザリ)。重大度は「緊急」(critical) です。関連する技術: Drupal、PHP。CVE: CVE-2026-55807。