CVE-2025-13080: Drupal core allows Forceful Browsing – CVSS 5.3 · Watchpost