CVE-2026-114546: Media Alias Display - Moderately critical - Information disclosure - SA-CONTRIB-2026-245
Published Oct 30, 2026
·Updated
Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Media Alias Display allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Media Alias Display versions: from 0.0.0 to 2.1.2, from 3.0.0 to 3.0.2.
Affected Software
1 affected component
Drupal Media Alias Display>=0.0.0<=2.1.2, >=3.0.0<=3.0.2
Event History
Oct 30, 2026
CVE Published
via MITRE·03:09 AM
Data Sourced
via MITRE·03:09 AM
DescriptionWeakness
Data Sourced
via OSV·03:09 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:18 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which deployments should be reviewed for exposure?
Review deployments using Media Alias Display versions from 0.0.0 through 2.1.2 or from 3.0.0 through 3.0.2.
2
What condition is associated with exploitation?
The issue involves sensitive information retained in a web browser cache and exploitation of incorrectly configured access control security levels.