https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-30T19:28:43.511944+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/drupal-contrib-2026-243 DRUPAL-CONTRIB-2026-243 2026-10-30T19:28:43.514624+00:00

Affected: Packagist:https://packages.drupal.org/8: drupal/media_bulk_upload

This module enables users to upload files and create media items in bulk.

The module doesn't sufficiently check user permission to create specific media types if the bulk upload form is configured for that media type.

This vulnerability is mitigated by the fact that an attacker must have a role with the permission "bulk upload form".

 https://db.gcve.eu/vuln/fkie_cve-2026-114544 fkie_cve-2026-114544 2026-10-30T19:28:43.514685+00:00

Incorrect Authorization vulnerability in Drupal Media Bulk Upload allows Forceful Browsing. This issue affects Media Bulk Upload versions: from 0.0.0 to 3.0.6.

 https://db.gcve.eu/vuln/ghsa-g3mc-56mw-9chv GHSA-g3mc-56mw-9chv 2026-10-30T19:28:43.514714+00:00

Incorrect Authorization vulnerability in Drupal Media Bulk Upload allows Forceful Browsing. This issue affects Media Bulk Upload versions: from 0.0.0 to 3.0.6.

 https://db.gcve.eu/vuln/wid-sec-w-2026-4230 WID-SEC-W-2026-4230 — Drupal Erweiterungen: Mehrere Schwachstellen 2026-10-30T19:28:43.514731+00:00

Ein Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um erweiterte Berechtigungen zu erlangen und Benutzerkonten zu übernehmen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, Daten zu manipulieren, Cross-Site-Scripting-Angriffe durchzuführen und nicht näher spezifizierte Auswirkungen zu verursachen.