Ai Translate
Monthly
Missing authorization in the Drupal AI Translate contrib module allows forceful browsing, so a user who already holds a low-privilege authenticated account on an affected site can reach AI Translate functionality or resources that should be gated behind stricter permissions. The issue affects the 0.0.0 through 1.3.2 and 1.4.0 through 1.4.1 version ranges and is rated moderate (CVSS 4.6, low confidentiality and integrity impact, no availability impact); only Drupal sites with this contrib module installed are exposed. Vendor patches are available at 1.3.2 and 1.4.1 per the Drupal advisory, no public exploit code has been identified at time of analysis, and the prioritisation signal places it in the this-month remediation window rather than an emergency one.
Missing authorization in the Drupal AI Translate contrib module allows forceful browsing, so a user who already holds a low-privilege authenticated account on an affected site can reach AI Translate functionality or resources that should be gated behind stricter permissions. The issue affects the 0.0.0 through 1.3.2 and 1.4.0 through 1.4.1 version ranges and is rated moderate (CVSS 4.6, low confidentiality and integrity impact, no availability impact); only Drupal sites with this contrib module installed are exposed. Vendor patches are available at 1.3.2 and 1.4.1 per the Drupal advisory, no public exploit code has been identified at time of analysis, and the prioritisation signal places it in the this-month remediation window rather than an emergency one.