CVE-2026-15083 — ECA: Event - Condition - Action - Less critical - Information disclosure - SA-CONTRIB-2026-074

CVE-2026-15083

ECA: Event - Condition - Action - Less critical - Information disclosure - SA-CONTRIB-2026-074 PUBLISHED

Description (CNA)

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal ECA: Event - Condition - Action allows Object Injection. This issue affects ECA: Event - Condition - Action versions: from 0.0.0 to 2.1.20, from 3.0.0 to 3.0.12, from 3.1.0 to 3.1.4.

Affected (CNA)

Vendor / product	Versions
Drupal / ECA: Event - Condition - Action	affected 0.0.0 before 2.1.20; affected 3.0.0 before 3.0.12; affected 3.1.0 before 3.1.4

CWE

CWE-915

References

https://www.drupal.org/sa-contrib-2026-074

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.