CVE-2025-8361
Missing Authorization vulnerability in Drupal Config Pages allows Forceful Browsing.This issue affects Config Pages: from 0.0.0 before 2.18.0.
Scoring
- Severity
- HIGH
- CVSS base score
- 7.6
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L
- EPSS probability
- 0.27%
- CWE
- CWE-962, CWE-862
- Published
- 2025-08-15
- Last modified
- 2026-08-10
Affected products
- Drupal Config Pages