PT-2025-22387 · Drupal · Drupal Single Content Sync

CVE-2025-48009

Published

2025-05-14

Updated

2025-06-10

CVSS v3.1

3.1

Low

Vector

AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Drupal Single Content Sync versions 0.0.0 through 1.4.11

Description The issue is related to a Missing Authorization vulnerability in Drupal Single Content Sync, which allows functionality misuse.

Recommendations For versions 0.0.0 through 1.4.11, update to version 1.4.12 or later to resolve the issue.

Exploit

Fix

Missing Authorization

Found an issue in the description? Have something to add? Feel free to write us 👾

CVE-2025-48009

DRUPAL-CONTRIB-2025-060

Drupal Single Content Sync