CVE-2026-73474

Published: Sep 2, 2026Modified: Sep 9, 2026

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 3.9 / Impact: 1.4

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Server-Side Request Forgery (SSRF) vulnerability in Drupal Entity Share Websub allows Server Side Request Forgery. This issue affects Entity Share Websub versions: from 0.0.0 to 1.1.2.

Affected (1)

Products: Entity Share Websub Project: Entity Share Websub

Entity Share Websub Project

1 product

Entity Share Websub

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Entity Share Websub Project Entity Share Websub	Before 1.1.2

Related CWEs

CWE-918

Server-Side Request Forgery (SSRF)

The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

References (1)

https://www.drupal.org/sa-contrib-2026-097

Source: mlhess@drupal.org

Vendor Advisory

Timeline

No history available yet.