Css Usage Analyzer
Monthly
Missing authorization in the Drupal CSS Usage Analyzer module (versions 1.0.0 through 1.0.2) allows unauthenticated remote attackers to perform forceful browsing against an internet-reachable Drupal site where the module is installed and enabled. The issue is CWE-862 with low confidentiality and integrity impact and no availability impact, rated CVSS 5.4 (moderate); the exact resource or path involved is not described in the available sources. Vendor patching is available per Drupal SA-2026-189, and no public exploit was identified at time of analysis.
Missing authorization in the Drupal CSS Usage Analyzer module (versions 1.0.0 through 1.0.2) allows unauthenticated remote attackers to perform forceful browsing against an internet-reachable Drupal site where the module is installed and enabled. The issue is CWE-862 with low confidentiality and integrity impact and no availability impact, rated CVSS 5.4 (moderate); the exact resource or path involved is not described in the available sources. Vendor patching is available per Drupal SA-2026-189, and no public exploit was identified at time of analysis.