CVE-2026-118571
Media Alias Display - Moderately critical - Information disclosure - SA-CONTRIB-2026-292
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Media Alias Display allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Media Alias Display versions: from 0.0.0 to 2.1.3, from 3.0.0 to 3.0.3.
| CWE | CWE-525 |
| Vendor | drupal |
| Product | media alias display |
| Ecosystems | |
| Industries | WebMedia |
| Published | Oct 30, 2026 |
Stay Ahead of the Next One
Get instant alerts for drupal media alias display
Be the first to know when new unknown vulnerabilities affecting drupal media alias display are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Drupal / Media Alias Display
0.0.0 < 2.1.3 3.0.0 < 3.0.3
Credits
Pierre Rudloff (prudloff) Timothy Dickens (tregonia) Stephen Mustgrave (smustgrave) Swan Kalata (akalata) Greg Knaddison (greggles) Juraj Nemec (poker10) Pierre Rudloff (prudloff) Jess (xjm)