GitHub Advisoryadvisory · Packagist

GHSA-c8q6-wp7v-46r9 Drupal AI Missing Authorization vulnerability

MEDIUM Published 2025-04-01 Modified 2025-04-29 Official page ↗
Aliases
CVE-2025-31678
Ecosystem
Packagist
Packages
drupal/ai
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Weaknesses
CWE-862
Reviewed
2025-04-02

Affected packages

• Packagist drupal/ai: < 1.0.3 → fixed in 1.0.3

Description

Missing Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Forceful Browsing. This issue affects AI (Artificial Intelligence): from 0.0.0 before 1.0.3.

Related

Alias · CVE (1)

  • CVE-2025-31678 Missing Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Forceful Browsing.This issue affects AI (Artificial… vulnerability

Weakness · CWE (1)

  • CWE-862 Missing Authorization weakness

References