Server-Side Request Forgery Vulnerability in Drupal Freelinking
CVE-2026-107310

Currently unrated

Key Information:

Vendor

Drupal
Status
Freelinking
Vendor
CVE Published:
30 October 2026

What is CVE-2026-107310?

A Server-Side Request Forgery (SSRF) vulnerability exists in the Freelinking module for Drupal, impacting versions 0.0.0 through 4.0.3. This flaw allows attackers to send crafted requests from the server, potentially leading to unauthorized access to internal resources and data exposure. It is crucial for users of the affected versions to apply updates or patches to mitigate the risks associated with this vulnerability, ensuring the security of their web applications.

Affected Version(s)

Freelinking 0.0.0 < 4.0.3

References

https://www.drupal.org/sa-contrib-2026-213

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Marcus Johansson (marcus_johansson)
Marcus Johansson (marcus_johansson)
Matthew Radcliffe (mradcliffe)
Swan Kalata (akalata)
Greg Knaddison (greggles)
.