CVE-2025-48009

Description

Missing Authorization vulnerability in Drupal Single Content Sync allows Functionality Misuse.This issue affects Single Content Sync: from 0.0.0 before 1.4.12.

Reserved 2025-05-14 | Published 2025-05-21 | Updated 2025-05-21 | Assigner drupal

Problem types

CWE-862 Missing Authorization

Product status

Default status
unaffected

0.0.0 before 1.4.12
affected

Credits

Dezső Biczó (mxr576) finder

Dave Long (longwave) remediation developer

Dezső Biczó (mxr576) remediation developer

Oleksandr Kuzava (nginex) remediation developer

Greg Knaddison (greggles) coordinator

Juraj Nemec (poker10) coordinator

References

www.drupal.org/sa-contrib-2025-060

cve.org (CVE-2025-48009)

nvd.nist.gov (CVE-2025-48009)

Download JSON