PUBLISHED
2025-11-18 17:15
MODIFIED
2025-11-18 17:15
EPSS (Prob. Exploit)
0.24%
Top 84.4%
> DESCRIPTION
User Interface (UI) Misrepresentation of Critical Information vulnerability in Drupal Drupal core allows Content Spoofing.This issue affects Drupal core: from 8.0.0 before 10.4.9, from 10.5.0 before 10.5.6, from 11.0.0 before 11.1.9, from 11.2.0 before 11.2.8.
> AFFECTED_PRODUCTS
ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.
> CWE DETAILED DESCRIPTIONS
CWE-451: User Interface (UI) Misrepresentation of Critical Information - The user interface (UI) does not properly represent critical information to the user, allowing the information - or its source - to be obscured or spoofed. This is often a component in phishing attacks.
> GITHUB SECURITY ADVISORY
GHSA-h89p-5896-f4q8
LOW
Drupal core allows Content Spoofing
AFFECTED PACKAGES:
COMPOSER / drupal/core
>= 11.2.0, < 11.2.8
Fixed in: 11.2.8
COMPOSER / drupal/core
>= 11.0.0, < 11.1.9
Fixed in: 11.1.9
COMPOSER / drupal/core
>= 10.5.0, < 10.5.6
Fixed in: 10.5.6
COMPOSER / drupal/core
>= 8.0.0, < 10.4.9
Fixed in: 10.4.9
> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)
Drupal core - Moderately critical - Defacement - SA-CORE-2025-007
AFFECTED PACKAGES:
Unknown / Unknown
42 versions affected
ALIASES:
BIT-drupal-2025-13082, DRUPAL-CORE-2025-007, GHSA-h89p-5896-f4q8
> HISTORIQUE DES MODIFICATIONS
Première apparition
18/11/2025 17:15
Source: NVD
📊
ENRICHISSEMENT
19/01/2026 17:37
CVEPROJECT
Champ modifié: CVE Project
📊
ENRICHISSEMENT
01/12/2025 06:01
CWE
Champ modifié: Description CWE
Nouvelle valeur:
CWE-451: User Interface (UI) Misrepresentation of Critical Information - The user interface (UI) does not properly represent critical information to the user, allowing the information - or its source ...
Total des modifications: 2
Dernière mise à jour: 9 months ago