4.3Orta

CVE-2025-13082Drupal core - Moderately critical - Defacement - SA-CORE-2025-007

Drupal Drupal core Yayım: (11 ay önce)

Açıklama

User Interface (UI) Misrepresentation of Critical Information vulnerability in Drupal Drupal core allows Content Spoofing.This issue affects Drupal core: from 8.0.0 before 10.4.9, from 10.5.0 before 10.5.6, from 11.0.0 before 11.1.9, from 11.2.0 before 11.2.8.

Zayıflık türü (CWE): CWE-451

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
drupal drupal 8.0.0 – < 10.4.9
Drupal Drupal core 8.0.0 – < 10.4.9, 10.5.0 – < 10.5.6, 11.0.0 – < 11.1.9, 11.2.0 – < 11.2.8

Kaynaklar ve yamalar

CPE eşleşmeleri (NVD) (4)

  • cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:* ≥ 8.0.0 < 10.4.9
  • cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:* ≥ 10.5.0 < 10.5.6
  • cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:* ≥ 11.0.0 < 11.1.9
  • cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:* ≥ 11.2.0 < 11.2.8