CVE-2025-10929 | THREATINT

Description

Improper Validation of Consistency within Input vulnerability in Drupal Reverse Proxy Header allows Manipulating User-Controlled Variables.This issue affects Reverse Proxy Header: from 0.0.0 before 1.1.2.

PUBLISHED Reserved 2025-09-24 | Published 2025-10-29 | Updated 2025-10-30 | Assigner drupal

Problem types

CWE-1288 Improper Validation of Consistency within Input

Product status

Default status

unaffected

0.0.0 (semver) before 1.1.2

affected

Credits

Pierre Rudloff (prudloff) finder

Bohdan Artemchuk (bohart) remediation developer

Drew Webber (mcdruid) remediation developer

Pierre Rudloff (prudloff) remediation developer

Greg Knaddison (greggles) coordinator

Juraj Nemec (poker10) coordinator

Pierre Rudloff (prudloff) coordinator

References

www.drupal.org/sa-contrib-2025-111

cve.org (CVE-2025-10929)

nvd.nist.gov (CVE-2025-10929)

Download JSON