medium5.3
CVE-2026-73478
Incorrect Authorization vulnerability in Drupal Diff allows Forceful Browsing.
Impact
Incorrect Authorization vulnerability in Drupal Diff allows Forceful Browsing. This issue affects Diff versions: from 0.0.0 to 2.0.1, from 2.1.0 to 2.1.1.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Diff Project | Diff | before 2.0.1 from 5.x-1.0 through 5.x-2.1 from 6.x-1.0 through 6.x-2.3 from 7.x-3.0 through 7.x-3.5 from 8.x-1.0 through 8.x-1.10 Version 2.1.0 |