Skip to content
OpenAdvisories
Medium · 5.3 CVE-2025-10929 DRUPAL-CONTRIB-2025-111EUVD-2025-36875GHSA-fg8x-q69g-4qp3

Reverse Proxy Header - Less critical - Access bypass - SA-CONTRIB-2025-111

Published Oct 29, 2025 · Updated Oct 30, 2025 · Assigned by drupal

Description

Improper Validation of Consistency within Input vulnerability in Drupal Reverse Proxy Header allows Manipulating User-Controlled Variables.This issue affects Reverse Proxy Header: from 0.0.0 before 1.1.2.

Affected products

VendorProductAffectedFixed
Drupal Reverse Proxy Header 0.0.0 – < 1.1.2 1.1.2

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/reverse_proxy_header < 1.1.2 1.1.2 DRUPAL-CONTRIB-2025-111

Advisories 1

References