GitHub Advisoryadvisory · Packagist

GHSA-c424-hgg9-9c4w Drupal Quick Node Block Missing Authorization vulnerability

MEDIUM Published 2025-06-11 Modified 2025-06-11 Official page ↗
Aliases
CVE-2025-48444
Ecosystem
Packagist
Packages
drupal/quick_node_block
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-862
Reviewed
2025-06-11

Affected packages

• Packagist drupal/quick_node_block: < 2.0.0 → fixed in 2.0.0

Description

Missing Authorization vulnerability in Drupal Quick Node Block allows Forceful Browsing. This issue affects Quick Node Block: from 0.0.0 before 2.0.0.

Related

Alias · CVE (1)

  • CVE-2025-48444 Missing Authorization vulnerability in Drupal Quick Node Block allows Forceful Browsing.This issue affects Quick Node Block: from 0.0.0… vulnerability

Weakness · CWE (1)

  • CWE-862 Missing Authorization weakness

References