AIKIDO-2026-652350
drupal/views_share is vulnerable to Access Bypass
45
Medium Risk
This Affects:
drupal/views_shareTL;DR
The Views Share module embeds a view display on another website through an iframe. Affected versions do not sufficiently block access to those displays. The view data itself is not shown, but an attacker who knows the view and display IDs can still cause resource-intensive views to execute, which can degrade site performance.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range.
Background info
drupal/views_share is vulnerable to Access Bypass in versions 2.0.0 - 2.0.0.
How to fix this
Upgrade the drupal/views_share library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.