Skip to content
OpenAdvisories
Medium · 5.3 CVE-2025-13985 DRUPAL-CONTRIB-2025-123EUVD-2025-206436GHSA-2v5p-5pj6-h3hp

Entity Share - Moderately critical - Access bypass, Information Disclosure - SA-CONTRIB-2025-123

Published Jan 28, 2026 · Updated Jan 29, 2026 · Assigned by drupal

Vendor: Drupal Product: Entity Share Package: drupal/entity_share Ecosystem: Packagist

Description

Incorrect Authorization vulnerability in Drupal Entity Share allows Forceful Browsing.This issue affects Entity Share: from 0.0.0 before 3.13.0.

Affected products

VendorProductAffectedFixed
Drupal Entity Share 0.0.0 – < 3.13.0 3.13.0

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/entity_share < 3.13.0 3.13.0 DRUPAL-CONTRIB-2025-123

Advisories 1

References