Skip to content
OpenAdvisories
High · 7.6 CVE-2025-8361 DRUPAL-CONTRIB-2025-093EUVD-2025-25036GHSA-w63x-4vj8-p867

Config Pages - Moderately critical - Access bypass - SA-CONTRIB-2025-093

Published Aug 15, 2025 · Updated Aug 10, 2026 · Assigned by drupal

Vendor: Drupal Product: Config Pages Package: drupal/config_pages Ecosystem: Packagist

Description

Missing Authorization vulnerability in Drupal Config Pages allows Forceful Browsing.

This issue affects Config Pages: from 0.0.0 before 2.18.0.

Affected products

VendorProductAffectedFixed
Drupal Config Pages 0.0.0 – < 2.18.0 2.18.0

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/config_pages < 2.18.0 2.18.0 DRUPAL-CONTRIB-2025-093

Advisories 1

References