0
CRITICAL
1
HIGH
0
MEDIUM
0
LOW
0
POC
0
KEV
Monthly
Missing Authorization vulnerability in Drupal Config Pages allows Forceful Browsing.0.0 before 2.18.0. Rated high severity (CVSS 7.6), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Information Disclosure
Drupal
Config Pages
NVD
CVSS 3.1
7.6
EPSS
0.0%
CVE-2025-8361
PHP
EPSS 0%
CVSS 7.6
HIGH
PATCH
This Week
Missing Authorization vulnerability in Drupal Config Pages allows Forceful Browsing.0.0 before 2.18.0. Rated high severity (CVSS 7.6), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Information Disclosure
Drupal
Config Pages
NVD