CVE-2025-8361 | THREATINT

Description

Missing Authorization vulnerability in Drupal Config Pages allows Forceful Browsing.This issue affects Config Pages: from 0.0.0 before 2.18.0.

PUBLISHED Reserved 2025-07-30 | Published 2025-08-15 | Updated 2025-08-15 | Assigner drupal

Default status

unaffected

0.0.0 before 2.18.0

affected

Pierre Rudloff (prudloff) finder

Pierre Rudloff (prudloff) remediation developer

Alexander Shumenko (shumer) remediation developer

Greg Knaddison (greggles) coordinator

Heine Deelstra (heine) coordinator

Jess (xjm) coordinator

Download JSON