Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-31673
4.6
MEDIUMCVSS v3
Severity scale
010
Description
Incorrect Authorization vulnerability in Drupal Drupal core allows Forceful Browsing.This issue affects Drupal core: from 8.0.0 before 10.3.13, from 10.4.0 before 10.4.3, from 11.0.0 before 11.0.12, from 11.1.0 before 11.1.3.
drupal/drupal
GitHubVerbatim mirror of the git.drupal.org repository for Drupal core. Please see the https://github.com/drupal/drupal#contributing. PRs are not accepted on GitHub.
GitHubVerbatim mirror of the git.drupal.org repository for Drupal core. Please see the https://github.com/drupal/drupal#contributing. PRs are not accepted on GitHub.>= 10.4.0, < 10.4.3, >= 11.0.0, < 11.0.12, >= 11.1.0, < 11.1.3, >= 8.0.0, < 10.3.13NVD
drupal
Docker HubDrupal is an open source content management platform powering millions of websites and applications.
Docker HubDrupal is an open source content management platform powering millions of websites and applications.>= 10.4.0, < 10.4.3, >= 11.0.0, < 11.0.12, >= 11.1.0, < 11.1.3, >= 8.0.0, < 10.3.13NVD
RubyGems
NPM