CVE-2025-31690

The Cache Utility module provides an ability to view status and flush various caches. The module doesn't sufficiently protect against Cross Site Requ...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

The Cache Utility module provides an ability to view status and flush various caches.

The module doesn't sufficiently protect against Cross Site Request Forgery (CSRF) attacks by validating user identity and intent when flushing a cache.

Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

Paquets affectés

Packagist:https://packages.drupal.org/8 drupal/cache_utility

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.1"}],"database_specific":{"constraint":"<1.2.1"}}]

Références

web drupal.org