PT-2026-5204

CVE-2025-13985

·

Published

2025-12-03

·

Updated

2026-02-06

Description by

CVSS 3.1
5.3
Medium
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions Drupal Entity Share versions prior to 3.13.0
Description An authorization issue exists in Drupal Entity Share that permits forceful browsing. This flaw potentially allows unauthorized access to resources.
Recommendations Update Drupal Entity Share to version 3.13.0 or later.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-863: Incorrect Authorization
Related identifiers
CVE-2025-13985
DRUPAL-CONTRIB-2025-123
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com