Drupal Reverse Proxy Header allows Manipulating User-Controlled Variables

MITTEL 5.3CVE-2025-10929 · DRUPAL-CONTRIB-2025-111 · GHSA-fg8x-q69g-4qp3 · Published 30/10/2025 · updated 08/10/2026

Kurz gesagt

CVE-2025-10929 ist eine Schwachstelle (MITTEL (CVSS 5.3)) in drupal/reverse_proxy_header, drupal/reverse_proxy_header, reverse proxy header (reverse proxy header project).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.30%, höher als bei 23.2% aller Schwachstellen.
Abhilfe: auf 1.1.2 oder neuer aktualisieren.

Package	Affected versions	Patched versions
drupal/reverse_proxy_header Packagist	`< 1.1.2`	`1.1.2`
drupal/reverse_proxy_header Packagist:https://packages.drupal.org/8	`< 1.1.2`	`1.1.2`
reverse proxy header reverse_proxy_header_project	`< 1.1.2`	`1.1.2`

Description

Improper Validation of Consistency within Input vulnerability in Drupal Reverse Proxy Header allows Manipulating User-Controlled Variables. This issue affects Reverse Proxy Header: from 0.0.0 before 1.1.2.

NVD description

Improper Validation of Consistency within Input vulnerability in Drupal Reverse Proxy Header allows Manipulating User-Controlled Variables.This issue affects Reverse Proxy Header: from 0.0.0 before 1.1.2.

References

nvd.nist.gov/vuln/detail/CVE-2025-10929 · ADVISORY
drupal.org/sa-contrib-2025-111 · WEB

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free