Diff Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Diff Project records in CISA KEV

No Diff Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records

TI-2024-12322 CVE-2024-13278 · GHSA-223j-7cj4-4cw7

MEDIUM 47

Incorrect Authorization vulnerability in Drupal Diff allows Functionality Misuse.This issue affects Diff: from 0.0.0 before 1.8.0.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00359 Published 2025-01-09 Fixed in 1.8.0 CWE-863

TI-2026-51590 CVE-2026-73478 · GHSA-ghfg-j64w-r9hj

LOW 30

Incorrect Authorization vulnerability in Drupal Diff allows Forceful Browsing.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00313 Published 2026-09-02 Fixed in 2.0.1, 2.1.1 CWE-863