CVE-2026-32266 in Google Cloud Storage for Craft CMS plugin
Сводка
по MITRE • 18.03.2026
The Google Cloud Storage for Craft CMS plugin provides a Google Cloud Storage integration for Craft CMS. In versions on the 2.x branch prior to 2.2.1, the `DefaultController->actionLoadBucketData()` endpoint allows unauthenticated users with a valid CSRF token to view a list of buckets that the plugin is allowed to see. Users should update to version 2.2.1 of the plugin to mitigate the issue.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.