CVE-2025-7031
CVE-2025-7031 · Config Pages Viewer - Critical - Access bypass - SA-CONTRIB-2025-086
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Missing Authentication for Critical Function vulnerability in Drupal Config Pages Viewer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Config Pages Viewer: from 0.0.0 before 1.0.4.
CVSS 5.3 · Medium · EPSS 0.3% · Fix available
- Published
- Updated
Stack: php
Affected products and versions
config pages viewer
- Versions
- ≥ 0.0.0, < 1.0.4: Affected (semver)
Update to 1.0.4
drupal/config_pages_viewer Packagist:https://packages.drupal.org/8
- Affected ranges
- ECOSYSTEM: < 1.0.4
Update to 1.0.4