CVE-2026-114546

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-114546

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-114546.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-114546

Aliases

DRUPAL-CONTRIB-2026-245

Published

2026-10-30T03:09:23Z

Modified

2026-11-08T02:30:57Z

Severity

3.7 (Low) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS Calculator

Summary

Media Alias Display - Moderately critical - Information disclosure - SA-CONTRIB-2026-245

Details

Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Media Alias Display allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Media Alias Display versions: from 0.0.0 to 2.1.2, from 3.0.0 to 3.0.2.

Database specific

{
    "cna_assigner": "drupal",
    "cwe_ids": [
        "CWE-525"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/114xxx/CVE-2026-114546.json"
}

References

Affected packages

Git / git.drupalcode.org/project/media_alias_display

Affected ranges

Type

GIT

Repo

https://git.drupalcode.org/project/media_alias_display

Events

Introduced

Fixed

1bae874091362c422696b3a249eff15b99ba9085

Introduced

6387868668a307c31f377e7bf94c6a9bb5fff016

Fixed

c48e147d00c9745bf1a8bc6cd65dde8c093a98c3

Database specific

Show details

{
    "extracted_events": [
        {
            "range": [
                {
                    "introduced": "0.0.0"
                },
                {
                    "fixed": "2.1.2"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandardRange"
        },
        {
            "range": [
                {
                    "introduced": "3.0.0"
                },
                {
                    "fixed": "3.0.2"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandardRange"
        }
    ]
}

Affected versions

1.*

1.0.0

1.0.1

1.0.1-beta1

1.0.10

1.0.11

1.0.2

1.0.3

1.0.4

1.0.5

1.0.6

1.0.7

1.0.8

1.0.9

1.10.11

2.*

2.0.0

2.0.1

2.1.0

2.1.0-beta1

2.1.0-beta2

3.*

3.0.0

3.0.1

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-114546.json"