PUBLISHED
2025-11-18 17:15
MODIFIED
2025-11-18 17:15
EPSS (Prob. Exploit)
0.35%
Top 71.6%
> DESCRIPTION
Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal Drupal core allows Forceful Browsing.This issue affects Drupal core: from 8.0.0 before 10.4.9, from 10.5.0 before 10.5.6, from 11.0.0 before 11.1.9, from 11.2.0 before 11.2.8.
> AFFECTED_PRODUCTS
ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.
> CWE DETAILED DESCRIPTIONS
CWE-754: Improper Check for Unusual or Exceptional Conditions - The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.
> GITHUB SECURITY ADVISORY
GHSA-83v7-c2cf-p9c2
LOW
Drupal core allows Forceful Browsing
AFFECTED PACKAGES:
COMPOSER / drupal/core
>= 11.2.0, < 11.2.8
Fixed in: 11.2.8
COMPOSER / drupal/core
>= 11.0.0, < 11.1.9
Fixed in: 11.1.9
COMPOSER / drupal/core
>= 10.5.0, < 10.5.6
Fixed in: 10.5.6
COMPOSER / drupal/core
>= 8.0.0, < 10.4.9
Fixed in: 10.4.9
> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)
Drupal core - Moderately critical - Denial of Service - SA-CORE-2025-005
AFFECTED PACKAGES:
Unknown / Unknown
42 versions affected
ALIASES:
BIT-drupal-2025-13080, DRUPAL-CORE-2025-005, GHSA-83v7-c2cf-p9c2
> HISTORIQUE DES MODIFICATIONS
Première apparition
18/11/2025 17:15
Source: NVD
📊
ENRICHISSEMENT
19/01/2026 17:37
CVEPROJECT
Champ modifié: CVE Project
📊
ENRICHISSEMENT
01/12/2025 06:01
CWE
Champ modifié: Description CWE
Nouvelle valeur:
CWE-754: Improper Check for Unusual or Exceptional Conditions - The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during ...
Total des modifications: 2
Dernière mise à jour: 9 months ago