{"field_issue_status":"7","field_project":{"uri":"https:\/\/www.drupal.org\/api-d7\/node\/3592454","id":"3592454","resource":"node","machine_name":"advanced_filesystem"},"field_sa_advisory_id":"217","field_sa_coordinated_by":{"value":"\u003Cul\u003E\n\u003Cli\u003E\u003Ca href=\u0022\/u\/greggles\u0022 rel=\u0022nofollow\u0022\u003EGreg Knaddison (greggles)\u003C\/a\u003E of the Drupal Security Team\n\u003C\/li\u003E\u003Cli\u003E\u003Ca href=\u0022\/u\/poker10\u0022 rel=\u0022nofollow\u0022\u003EJuraj Nemec (poker10)\u003C\/a\u003E of the Drupal Security Team\n\u003C\/li\u003E\u003C\/ul\u003E","format":"1"},"field_sa_criticality":"AC:Basic\/A:None\/CI:None\/II:Some\/E:Theoretical\/TD:Default","field_sa_description":{"value":"\u003Cp\u003EAdvanced File System turns Drupal\u0027s file storage into a manageable, observable and maintainable subsystem.\u003C\/p\u003E\n\u003Cp\u003EThe Advanced Filesystem: Backup submodule does not sufficiently validate certain requests. This may allow an attacker to trick an authenticated user into performing unintended actions through a Cross-Site Request Forgery (CSRF) vulnerability.\u003C\/p\u003E\n\u003Cp\u003EThe vulnerability is mitigated by the fact that \u003Ccode class=\u0022language-php\u0022\u003Eadvanced_filesystem_backup\u003C\/code\u003E module must be enabled.\u003C\/p\u003E","format":"1"},"field_sa_fixed_by":{"value":"\u003Cul\u003E\n\u003Cli\u003E\u003Ca href=\u0022\/u\/cristianodemari\u0022 rel=\u0022nofollow\u0022\u003ECristiano Demari (cristianodemari)\u003C\/a\u003E\n\u003C\/li\u003E\u003C\/ul\u003E","format":"1"},"field_sa_reported_by":{"value":"\u003Cul\u003E\n\u003Cli\u003E\u003Ca href=\u0022\/u\/marcus_johansson\u0022 rel=\u0022nofollow\u0022\u003EMarcus Johansson (marcus_johansson)\u003C\/a\u003E\n\u003C\/li\u003E\u003C\/ul\u003E","format":"1"},"field_sa_solution":{"value":"\u003Cp\u003EInstall the latest version:\u003C\/p\u003E\n\u003Cul\u003E\n\u003Cli\u003EIf you use the Advanced File System module, upgrade to \u003Ca href=\u0022https:\/\/www.drupal.org\/project\/advanced_filesystem\/releases\/1.0.28\u0022 rel=\u0022nofollow\u0022\u003EAdvanced File System 1.0.28\u003C\/a\u003E\u003C\/li\u003E\n\u003C\/ul\u003E","format":"1"},"field_sa_type":"Cross-Site Request Forgery","field_issue_last_status_change":"1791392292","field_sa_cve":["CVE-2026-107262"],"field_is_psa":"0","field_affected_versions":"\u003C1.0.28","field_fixed_in":[{"uri":"https:\/\/www.drupal.org\/api-d7\/node\/3628941","id":"3628941","resource":"node"}],"nid":"3627531","vid":"14515035","is_new":false,"type":"sa","title":"Advanced Filesystem - Moderately critical - Cross-Site Request Forgery - SA-CONTRIB-2026-217","language":"en","url":"https:\/\/www.drupal.org\/sa-contrib-2026-217","edit_url":"https:\/\/www.drupal.org\/node\/3627531\/edit","status":"1","promote":"0","sticky":"0","created":"1791392292","changed":"1791392292","author":{"uri":"https:\/\/www.drupal.org\/api-d7\/user\/406161","id":"406161","resource":"user"},"comment":"0","comments":[{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16797023","id":16797023,"resource":"comment"},{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16797025","id":16797025,"resource":"comment"},{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16797026","id":16797026,"resource":"comment"},{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16797027","id":16797027,"resource":"comment"}],"comment_count":0,"comment_count_new":false,"body":[],"feeds_item_guid":null,"feeds_item_url":null,"feed_nid":null,"flag_flag_tracker_follow_user":[],"flag_tracker_follower_count":null,"has_new_content":null,"last_comment_timestamp":"1791392292","sa_risk":[12,"Moderately critical"],"sa_id":"SA-CONTRIB-2026-217"}