Skip to content
OpenAdvisories
Medium · 5.3 CVE-2025-48444 DRUPAL-CONTRIB-2025-064EUVD-2025-18110GHSA-c424-hgg9-9c4w

Quick Node Block - Moderately critical - Access bypass - SA-CONTRIB-2025-064

Published Jun 11, 2025 · Updated Jun 11, 2025 · Assigned by drupal

Vendor: Drupal Product: Quick Node Block Package: drupal/quick_node_block Ecosystem: Packagist

Description

Missing Authorization vulnerability in Drupal Quick Node Block allows Forceful Browsing.This issue affects Quick Node Block: from 0.0.0 before 2.0.0.

Affected products

VendorProductAffectedFixed
Drupal Quick Node Block 0.0.0 – < 2.0.0 2.0.0

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/quick_node_block < 2.0.1 2.0.1 DRUPAL-CONTRIB-2025-064
Packagist drupal/quick_node_block < 2.0.0 2.0.0 GHSA-c424-hgg9-9c4w

Advisories 1

References