← Database

CVE-2026-58589

MEDIUM CVSS: 5.4 Published: 2026-07-10 Modified: 2026-07-14

Description

Missing Authorization vulnerability in Drupal FlowDrop allows Forceful Browsing. This issue affects FlowDrop versions: from 0.0.0 to 1.6.0.

Affected Platforms

Flowdrop Project Flowdrop

Weakness Type

CWE-862

References