5.3Orta

CVE-2025-13080Drupal core - Moderately critical - Denial of Service - SA-CORE-2025-005

Drupal Drupal core Yayım: (12 ay önce)

Açıklama

Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal Drupal core allows Forceful Browsing.This issue affects Drupal core: from 8.0.0 before 10.4.9, from 10.5.0 before 10.5.6, from 11.0.0 before 11.1.9, from 11.2.0 before 11.2.8.

Zayıflık türü (CWE): CWE-754

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
drupal drupal 8.0.0 – < 10.4.9
Drupal Drupal core 8.0.0 – < 10.4.9, 10.5.0 – < 10.5.6, 11.0.0 – < 11.1.9, 11.2.0 – < 11.2.8

Kaynaklar ve yamalar

CPE eşleşmeleri (NVD) (4)

  • cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:* ≥ 8.0.0 < 10.4.9
  • cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:* ≥ 10.5.0 < 10.5.6
  • cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:* ≥ 11.0.0 < 11.1.9
  • cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:* ≥ 11.2.0 < 11.2.8