Config Pages
1 CVEs
product
Monthly
Missing Authorization vulnerability in Drupal Config Pages allows Forceful Browsing.0.0 before 2.18.0. Rated high severity (CVSS 7.6), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Information Disclosure
Config Pages
Drupal
NVD
CVSS 3.1
7.6
EPSS
0.0%
CVE-2025-8361
EPSS 0%
CVSS 7.6
HIGH
PATCH
This Week
Missing Authorization vulnerability in Drupal Config Pages allows Forceful Browsing.0.0 before 2.18.0. Rated high severity (CVSS 7.6), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Information Disclosure
Config Pages
Drupal
NVD