CVE-2025-7031
Unknown
Unknown - Not Provided
BaseFortify
Publication date: 2025-07-08
Last updated on: 2025-09-04
Assigner: Drupal.org
Description
Description
Missing Authentication for Critical Function vulnerability in Drupal Config Pages Viewer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Config Pages Viewer: from 0.0.0 before 1.0.4.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| config_pages_viewer_project | config_pages_viewer | to 1.0.4 (exc) |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-306 | The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a Missing Authentication for Critical Function issue in the Drupal Config Pages Viewer module. It allows attackers to exploit incorrectly configured access control security levels, potentially gaining unauthorized access to critical configuration pages.
How can this vulnerability impact me? :
This vulnerability can impact you by allowing unauthorized users to access and potentially modify critical configuration settings in Drupal, which could lead to security breaches, data exposure, or disruption of services.
Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70