CVE-2025-3475

Description

Allocation of Resources Without Limits or Throttling, Incorrect Authorization vulnerability in Drupal WEB-T allows Excessive Allocation, Content Spoofing.This issue affects WEB-T: from 0.0.0 before 1.1.0.

PUBLISHED Reserved 2025-04-09 | Published 2025-04-09 | Updated 2025-04-09 | Assigner drupal

Problem types

CWE-770 Allocation of Resources Without Limits or Throttling

CWE-863 Incorrect Authorization

Product status

Credits

Jan Kellermann (jan kellermann) finder

dragels remediation developer

Jan Kellermann (jan kellermann) remediation developer

Greg Knaddison (greggles) coordinator

Juraj Nemec (poker10) coordinator

References

www.drupal.org/sa-contrib-2025-030

cve.org (CVE-2025-3475)

nvd.nist.gov (CVE-2025-3475)

Download JSON