Skip to content
OpenAdvisories
High · 8.2 CVE-2025-31678 DRUPAL-CONTRIB-2025-004EUVD-2025-9045GHSA-c8q6-wp7v-46r9

AI (Artificial Intelligence) - Moderately critical - Access bypass, Information Disclosure - SA-CONTRIB-2025-004

Published Mar 31, 2025 · Updated Apr 29, 2025 · Assigned by drupal

Description

Missing Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Forceful Browsing.This issue affects AI (Artificial Intelligence): from 0.0.0 before 1.0.3.

Affected products

VendorProductAffectedFixed
Drupal AI (Artificial Intelligence) 0.0.0 – < 1.0.3 1.0.3

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/ai < 1.0.3 1.0.3 DRUPAL-CONTRIB-2025-004

References