CVE-2025-7031

Description

Missing Authentication for Critical Function vulnerability in Drupal Config Pages Viewer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Config Pages Viewer: from 0.0.0 before 1.0.4.

Reserved 2025-07-02 | Published 2025-07-08 | Updated 2025-07-10 | Assigner drupal

Problem types

CWE-306 Missing Authentication for Critical Function

Product status

Default status
unaffected

0.0.0 before 1.0.4
affected

Credits

Pierre Rudloff (prudloff) finder

drdam remediation developer

Pierre Rudloff (prudloff) remediation developer

Greg Knaddison (greggles) coordinator

Juraj Nemec (poker10) coordinator

Jess (xjm) coordinator

References

www.drupal.org/sa-contrib-2025-086

cve.org (CVE-2025-7031)

nvd.nist.gov (CVE-2025-7031)

Download JSON