DRUPAL-CONTRIB-2018-059
This module enables you to create fields for storing decimal values as two integers (numerator and denominator) for maximum precision.
The module doesn't sufficiently filter XSS strings out of field labels.
This vulnerability is mitigated by the fact that an attacker must have a role with the ability to manage field configuration.
What each source reports
OSV No score
This module enables you to create fields for storing decimal values as two integers (numerator and denominator) for maximum precision.
The module doesn't sufficiently filter XSS strings out of field labels.
This vulnerability is mitigated by the fact that an attacker must have a role with the ability to manage field configuration.
- Record
DRUPAL-CONTRIB-2018-059- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
drupal/fractionPackagist:https://packages.drupal.org/8 |
before 1.2.0 | 1.2.0 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
DRUPAL-CONTRIB-2018-059 is a vulnerability with no CVSS score yet in drupal/fraction, published September 5, 2018. No source lists public exploit code. Fixed in drupal/fraction 1.2.0.