← Back to CVE search

CVE-2026-12535

Drupal Formatter Field

Description

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Formatter Field allows Object Injection. This issue affects Formatter Field versions: from 0.0.0 to 2.0.0.

CVSS 9.8EPSS 0.386%Risk 1.01
View source
Published
2026-07-10 22:16:39
Affected versions
<=2.0.0
Type
Web application
Last modified
2026-08-06 14:44:58
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H