Smart Content
Monthly
Missing authorization in the Drupal Smart Content contrib module (affected range 0.0.0 through the 3.2.1 boundary) lets an unauthenticated remote attacker perform forceful browsing to reach a restricted resource, with low confidentiality and integrity impact and no availability effect. The flaw is CWE-862, and the specific endpoint, feature, or route involved is not described in the available sources. No public exploit identified at time of analysis and there is no CISA KEV entry; the vendor has released a patch and the priority signal is this_month (moderate, not urgent).
Missing authorization in the Drupal Smart Content contrib module (affected range 0.0.0 through the 3.2.1 boundary) lets an unauthenticated remote attacker perform forceful browsing to reach a restricted resource, with low confidentiality and integrity impact and no availability effect. The flaw is CWE-862, and the specific endpoint, feature, or route involved is not described in the available sources. No public exploit identified at time of analysis and there is no CISA KEV entry; the vendor has released a patch and the priority signal is this_month (moderate, not urgent).