https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 31 Oct 2026 07:34:12 +0000 https://db.gcve.eu/vuln/drupal-contrib-2026-245 <p><strong>Affected:</strong> Packagist:https://packages.drupal.org/8: drupal/media_alias_display</p> <p>This module allows for direct viewing of a file with the URL alias.</p> <p>In some cases, files may be served with the HTTP header `Cache-Control: public` when they should be uncacheable. This can lead to some users getting cached versions of files with information they should not be able to access.</p> <p>This vulnerability is mitigated by the following:</p> <p>* Drupal must be configured to handle non-public files using a custom or contributed module providing an additional file scheme. * An attacker must know to request a file that has previously been requested by a more-privileged user, and that file must still be cached.</p> <p><strong>Affected:</strong> Packagist:https://packages.drupal.org/8: drupal/media_alias_display</p> <p>This module allows for direct viewing of a file with the URL alias.</p> <p>In some cases, files may be served with the HTTP header `Cache-Control: public` when they should be uncacheable. This can lead to some users getting cached versions of files with information they should not be able to access.</p> <p>This vulnerability is mitigated by the following:</p> <p>* Drupal must be configured to handle non-public files using a custom or contributed module providing an additional file scheme. * An attacker must know to request a file that has previously been requested by a more-privileged user, and that file must still be cached.</p> https://db.gcve.eu/vuln/drupal-contrib-2026-245 https://db.gcve.eu/vuln/fkie_cve-2026-114546 <p>Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Media Alias Display allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Media Alias Display versions: from 0.0.0 to 2.1.2, from 3.0.0 to 3.0.2.</p> <p>Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Media Alias Display allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Media Alias Display versions: from 0.0.0 to 2.1.2, from 3.0.0 to 3.0.2.</p> https://db.gcve.eu/vuln/fkie_cve-2026-114546 https://db.gcve.eu/vuln/ghsa-ff5h-gcfv-mpvw <p>Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Media Alias Display allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Media Alias Display versions: from 0.0.0 to 2.1.2, from 3.0.0 to 3.0.2.</p> <p>Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Media Alias Display allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Media Alias Display versions: from 0.0.0 to 2.1.2, from 3.0.0 to 3.0.2.</p> https://db.gcve.eu/vuln/ghsa-ff5h-gcfv-mpvw