CVE-2026-107310: Freelinking - Moderately critical - Information Disclosure - SA-CONTRIB-2026-213

Published Oct 30, 2026

Updated

Server-Side Request Forgery (SSRF) vulnerability in Drupal Freelinking allows Server Side Request Forgery. This issue affects Freelinking versions: from 0.0.0 to 4.0.3.

Event History

Oct 30, 2026

CVE Published

via MITRE·03:10 AM

Data Sourced

via MITRE·03:10 AM

DescriptionWeakness

Data Sourced

via NVD·04:17 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Which deployments are affected?

Drupal sites using the Freelinking module in versions from 0.0.0 through 4.0.3 are affected.

What access does an attacker need to exploit this issue?

The supplied CVSS vector indicates an attacker needs network access and low privileges. No user interaction is required.

What is the likely security impact?

The CVSS vector indicates low confidentiality impact, with no integrity or availability impact. The vulnerability is classified as server-side request forgery.

CVE-2026-107310: Freelinking - Moderately critical - Information Disclosure - SA-CONTRIB-2026-213

Event History

Frequently Asked Questions

Which deployments are affected?

What access does an attacker need to exploit this issue?

What is the likely security impact?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are affected?

What access does an attacker need to exploit this issue?

What is the likely security impact?