Drupal Canvas Server-Side Request Forgery Vulnerability
Vulnerability
A Server-Side Request Forgery (SSRF) vulnerability exists in Drupal Canvas versions prior to 1.1.1. This vulnerability allows attackers to send crafted requests from the server, potentially accessing internal resources or services.
Impact
Exploitation of this vulnerability allows for Server-Side Request Forgery, where an attacker can make the server send requests on its behalf. This could be used to access internal services or resources that are not exposed to the public.
Added: Mar 25, 2026, 4:56 PM
Updated: Mar 25, 2026, 4:56 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
0.6exploitability
4.7remediation
0.0relevance
4.7threat
0.0urgency
2.9incentive
0.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.