CVE-2025-7031

MITTEL 5.3CVE-2025-7031 · DRUPAL-CONTRIB-2025-086 · Published 08/07/2025 · updated 17/06/2026

Kurz gesagt

CVE-2025-7031 ist eine Schwachstelle (MITTEL (CVSS 5.3)) in drupal/config_pages_viewer, config pages viewer (config pages viewer project).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.32%, höher als bei 24.6% aller Schwachstellen.
Abhilfe: auf 1.0.4 oder neuer aktualisieren.

Package	Affected versions	Patched versions
drupal/config_pages_viewer Packagist:https://packages.drupal.org/8	`< 1.0.4`	`1.0.4`
config pages viewer config_pages_viewer_project	`< 1.0.4`	`1.0.4`

Description

This module enables you to use config_pages as a content entity.

The module doesn't check permission or entity access before rendering config_pages content.

NVD description

Missing Authentication for Critical Function vulnerability in Drupal Config Pages Viewer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Config Pages Viewer: from 0.0.0 before 1.0.4.

References

drupal.org/sa-contrib-2025-086 · WEB

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free