CVE-2025-7031
Config Pages Viewer - Critical - Access bypass - SA-CONTRIB-2025-086
Summary
Config Pages Viewer - Critical - Access bypass - SA-CONTRIB-2025-086
Original description
The description as published by the source.
Missing Authentication for Critical Function vulnerability in Drupal Config Pages Viewer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Config Pages Viewer: from 0.0.0 before 1.0.4.
Affected packages
Packagist:https://packages.drupal.org/8
drupal/config_pages_viewer
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.4"}],"database_specific":{"constraint":"<1.0.4"}}]
References
- advisory github.com
- advisory nvd.nist.gov
- web drupal.org
- web git.drupalcode.org
- web drupal.org