CNNVD-202510-1391 Information
Oct 10, 2025
cve
CNNVD ID
CNNVD-202510-1391
Related CVE
- CNNVD Published: 2025-10-10
Description (Chinese)
Drupal Facets是Drupal社区的一个浏览器插件。 Drupal Facets 0.0.0版本至2.0.10之前版本和3.0.0版本至3.0.1之前版本存在安全漏洞，该漏洞源于缺少授权，可能导致强制浏览攻击。
Description (English)
Drupal Facets is a browser plugin for the Drupal community. There is a security loophole between Drupal Facets versions 0.00 and 2.0.10 and between 3.0.0 and 3.01, which stems from a lack of authorization and may lead to a forced browsing attack.
Hazard Level
High
Vulnerability Type
其他
Affected Vendor
Drupal
Published
2025-10-10
Last Modified
2026-02-24
References
https://www.drupal.org/sa-contrib-2025-099
Patch
https://www.drupal.org/sa-contrib-2025-099
Share on: