Drupal Entity Share Incorrect Authorization Vulnerability Allowing Forceful Browsing
Vulnerability
A vulnerability allowing incorrect authorization has been identified in the Drupal Entity Share module, versions 0.0.0 prior to 3.13.0. This issue enables forceful browsing, allowing users to access content or features they should not have permission to.
Impact
Exploitation of this vulnerability could lead to unauthorized access to entities or features, allowing users to bypass normal access controls.
Added: Jan 28, 2026, 8:35 PM
Updated: Jan 28, 2026, 8:35 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
2.5exploitability
6.6remediation
0.0relevance
2.4threat
0.0urgency
2.9incentive
0.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.