CVE-2025-7031
Config Pages Viewer - Critical - Access bypass - SA-CONTRIB-2025-086
Résumé
Config Pages Viewer - Critical - Access bypass - SA-CONTRIB-2025-086
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Missing Authentication for Critical Function vulnerability in Drupal Config Pages Viewer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Config Pages Viewer: from 0.0.0 before 1.0.4.
Paquets affectés
Packagist:https://packages.drupal.org/8
drupal/config_pages_viewer
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.4"}],"database_specific":{"constraint":"<1.0.4"}}]
Références
- advisory github.com
- advisory nvd.nist.gov
- web drupal.org
- web git.drupalcode.org
- web drupal.org