Skip to content
OpenAdvisories
High · 8.8 CVE-2025-31677 DRUPAL-CONTRIB-2025-003EUVD-2025-9046GHSA-9w85-x5hg-fr66

AI (Artificial Intelligence) - Critical - Cross Site Request Forgery - SA-CONTRIB-2025-003

Published Mar 31, 2025 · Updated Apr 29, 2025 · Assigned by drupal

Description

Cross-Site Request Forgery (CSRF) vulnerability in Drupal AI (Artificial Intelligence) allows Cross Site Request Forgery.This issue affects AI (Artificial Intelligence): from 1.0.0 before 1.0.2.

Affected products

VendorProductAffectedFixed
Drupal AI (Artificial Intelligence) 1.0.0 – < 1.0.2 1.0.2

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/ai >= 1.0.0, < 1.0.2 1.0.2 DRUPAL-CONTRIB-2025-003

References