PT-2025-33498

CVE-2025-8361

Published

2025-07-30

Updated

2025-08-16

CVSS 3.1

7.6

High

MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L

Name of the Vulnerable Software and Affected Versions: Drupal Config Pages versions 0.0.0 through 2.17.9

Description: Missing authorization allows forceful browsing of Config Pages.

Recommendations: Update to version 2.18.0 or later.

Exploitability

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

Related identifiers

DRUPAL-CONTRIB-2025-093

Found an issue in the description? Have something to add? Feel free to write us 👾