Search

Find a vulnerability

Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

    Related vulnerabilities

    DRUPAL-CONTRIB-2026-178 (CVE-2026-96374)

    Vulnerability from drupal – Published: 2026-09-23 16:53 – Updated: 2026-09-23 16:53 – Source website
    VLAI
    Details

    The Project Browser module enables you to apply recipes and enable modules from the web user interface.

    The module doesn't sufficiently validate admin actions to protect against cross-site request forgery attacks (CSRF).

    Credits
    Tin Nguyen Huu (s4m0y3d) www.drupal.org/u/s4m0y3d
    References
    To clipboard 

    {
  "affected": [
    {
      "database_specific": {
        "affected_versions": "\u003c2.0.3 || \u003e=2.1.0 \u003c2.1.5"
      },
      "package": {
        "ecosystem": "Packagist:https://packages.drupal.org/8",
        "name": "drupal/project_browser"
      },
      "ranges": [
        {
          "database_specific": {
            "constraint": "\u003c2.0.3"
          },
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "database_specific": {
            "constraint": "\u003e=2.1.0 \u003c2.1.5"
          },
          "events": [
            {
              "introduced": "2.1.0"
            },
            {
              "fixed": "2.1.5"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "severity": []
    }
  ],
  "aliases": [
    "CVE-2026-96374"
  ],
  "credits": [
    {
      "contact": [
        "https://www.drupal.org/u/s4m0y3d"
      ],
      "name": "Tin Nguyen Huu (s4m0y3d)"
    }
  ],
  "details": "The Project Browser module enables you to apply recipes and enable modules from the web user interface.\n\nThe module doesn\u0027t sufficiently validate admin actions to protect against cross-site request forgery attacks (CSRF).",
  "id": "DRUPAL-CONTRIB-2026-178",
  "modified": "2026-09-23T16:53:01.000Z",
  "published": "2026-09-23T16:53:01.000Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://www.drupal.org/sa-contrib-2026-178"
    }
  ],
  "schema_version": "1.7.0"
}