PUBLISHED
2025-10-30 00:15
MODIFIED
2025-10-30 00:15
EPSS (Prob. Exploit)
0.30%
Top 76.8%
> DESCRIPTION
Improper Validation of Consistency within Input vulnerability in Drupal Reverse Proxy Header allows Manipulating User-Controlled Variables.This issue affects Reverse Proxy Header: from 0.0.0 before 1.1.2.
> AFFECTED_PRODUCTS
ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.
> CWE DETAILED DESCRIPTIONS
CWE-1288: Improper Validation of Consistency within Input - The product receives a complex input with multiple elements or fields that must be consistent with each other, but it does not validate or incorrectly validates that the input is actually consistent.
> GITHUB SECURITY ADVISORY
GHSA-fg8x-q69g-4qp3
MODERATE
Drupal Reverse Proxy Header allows Manipulating User-Controlled Variables
AFFECTED PACKAGES:
COMPOSER / drupal/reverse_proxy_header
< 1.1.2
Fixed in: 1.1.2
> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)
Reverse Proxy Header - Less critical - Access bypass - SA-CONTRIB-2025-111
AFFECTED PACKAGES:
Unknown / Unknown
4 versions affected
ALIASES:
DRUPAL-CONTRIB-2025-111, GHSA-fg8x-q69g-4qp3
> HISTORIQUE DES MODIFICATIONS
Première apparition
30/10/2025 00:15
Source: NVD
📊
ENRICHISSEMENT
19/01/2026 17:36
CVEPROJECT
Champ modifié: CVE Project
📊
ENRICHISSEMENT
01/11/2025 06:01
CWE
Champ modifié: Description CWE
Nouvelle valeur:
CWE-1288: Improper Validation of Consistency within Input - The product receives a complex input with multiple elements or fields that must be consistent with each other, but it does not validate or i...
Total des modifications: 2
Dernière mise à jour: 9 months ago