PUBLISHED
2025-10-30 00:15
MODIFIED
2025-10-30 00:15
EPSS (Prob. Exploit)
0.31%
Top 76.4%
> DESCRIPTION
Incorrect Authorization vulnerability in Drupal CivicTheme Design System allows Forceful Browsing.This issue affects CivicTheme Design System: from 0.0.0 before 1.12.0.
> AFFECTED_PRODUCTS
ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.
> CWE DETAILED DESCRIPTIONS
CWE-863: Incorrect Authorization - The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.
> GITHUB SECURITY ADVISORY
GHSA-qxr9-f877-9842
HIGH
Drupal CivicTheme Design System allows Forceful Browsing
AFFECTED PACKAGES:
COMPOSER / drupal/civictheme
< 1.12.0
Fixed in: 1.12.0
> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)
CivicTheme Design System - Moderately critical - Information disclosure - SA-CONTRIB-2025-112
AFFECTED PACKAGES:
Unknown / Unknown
46 versions affected
ALIASES:
DRUPAL-CONTRIB-2025-112, GHSA-qxr9-f877-9842
> HISTORIQUE DES MODIFICATIONS
Première apparition
30/10/2025 00:15
Source: NVD
📊
ENRICHISSEMENT
19/01/2026 17:36
CVEPROJECT
Champ modifié: CVE Project
📊
ENRICHISSEMENT
01/11/2025 06:01
CWE
Champ modifié: Description CWE
Nouvelle valeur:
CWE-863: Incorrect Authorization - The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.
Total des modifications: 2
Dernière mise à jour: 9 months ago