← All advisories

High severity7.6NVD Advisory· Published Aug 15, 2025· Updated Aug 10, 2026

CVE-2025-8361

CVE-2025-8361

Description

Missing Authorization vulnerability in Drupal Config Pages allows Forceful Browsing.

This issue affects Config Pages: from 0.0.0 before 2.18.0.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Config Pages Project/Config Pages
cpe:2.3:a:config_pages_project:config_pages:*:*:*:*:*:drupal:*:*
Range: <2.18.0
Drupal/Config Pagesllm-fuzzy2 versions
<2.18.0+ 1 more
- (no CPE)range: <2.18.0
- (no CPE)range: 0.0.0

Patches

Vulnerability mechanics

References

1

www.drupal.org/sa-contrib-2025-093nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.