CVE-2026-73474 PUBLISHED

Entity Share Websub - Moderately critical - Server-side request forgery (SSRF) - SA-CONTRIB-2026-097

Assigner: drupal
Reserved: 12.08.2026 Published: 02.09.2026 Updated: 02.09.2026

Server-Side Request Forgery (SSRF) vulnerability in Drupal Entity Share Websub allows Server Side Request Forgery. This issue affects Entity Share Websub versions: from 0.0.0 to 1.1.2.

Product Status

Vendor Drupal
Product Entity Share Websub
Versions
  • affected from 0.0.0 to 1.1.2 (excl.)

Credits

  • Marcus Johansson (marcus_johansson) finder
  • Shawn Duncan (fathershawn) remediation developer
  • Jeffrey S. Mattson (jeffreysmattson) remediation developer
  • Swan Kalata (akalata) coordinator
  • Neil Drumm (drumm) coordinator
  • Greg Knaddison (greggles) coordinator

References

Problem Types

  • CWE-918 Server-Side Request Forgery (SSRF) CWE

Impacts

  • CAPEC-664 Server Side Request Forgery