Skip to content
OpenAdvisories
High · 8.8 CVE-2025-47701 DRUPAL-CONTRIB-2025-047EUVD-2025-14937GHSA-9m42-x6rr-h5qc

Restrict route by IP - Critical - Cross Site Request Forgery - SA-CONTRIB-2025-047

Published May 14, 2025 · Updated May 20, 2025 · Assigned by drupal

Description

Cross-Site Request Forgery (CSRF) vulnerability in Drupal Restrict route by IP allows Cross Site Request Forgery.This issue affects Restrict route by IP: from 0.0.0 before 1.3.0.

Affected products

VendorProductAffectedFixed
Drupal Restrict route by IP 0.0.0 – < 1.3.0 1.3.0

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/restrict_route_by_ip < 1.3.0 1.3.0 DRUPAL-CONTRIB-2025-047

Advisories 1

References