GitHub Advisoryadvisory · Packagist

GHSA-fg8x-q69g-4qp3 Drupal Reverse Proxy Header allows Manipulating User-Controlled Variables

MEDIUM Published 2025-10-30 Modified 2025-10-30 Official page ↗
Aliases
CVE-2025-10929
Ecosystem
Packagist
Packages
drupal/reverse_proxy_header
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Weaknesses
CWE-1288
Reviewed
2025-10-30

Affected packages

• Packagist drupal/reverse_proxy_header: < 1.1.2 → fixed in 1.1.2

Description

Improper Validation of Consistency within Input vulnerability in Drupal Reverse Proxy Header allows Manipulating User-Controlled Variables. This issue affects Reverse Proxy Header: from 0.0.0 before 1.1.2.

Related

Alias · CVE (1)

  • CVE-2025-10929 Improper Validation of Consistency within Input vulnerability in Drupal Reverse Proxy Header allows Manipulating User-Controlled… vulnerability

Weakness · CWE (1)

  • CWE-1288 Improper Validation of Consistency within Input weakness

References