Skip to main content

Owl Carousel 2

1 CVEs product

Monthly

CVE-2025-9554 Oct 10, 23:15 PHP MEDIUM This Month

Information disclosure in the Drupal 'Owl Carousel 2' contributed module (all versions) allows unauthenticated remote attackers to access limited sensitive information, with impact confined to confidentiality (CVSS 5.3). No public exploit code has been identified, and the EPSS score is 0.25% (15th percentile), indicating low real-world exploitation likelihood. The module must be installed and enabled on a Drupal site for exposure, and the specific vulnerable feature or endpoint is not detailed in available data.

Information Disclosure Drupal Owl Carousel 2
NVD
CVSS 3.1
5.3
EPSS
0.3%
EPSS 0% CVSS 5.3
MEDIUM This Month

Information disclosure in the Drupal 'Owl Carousel 2' contributed module (all versions) allows unauthenticated remote attackers to access limited sensitive information, with impact confined to confidentiality (CVSS 5.3). No public exploit code has been identified, and the EPSS score is 0.25% (15th percentile), indicating low real-world exploitation likelihood. The module must be installed and enabled on a Drupal site for exposure, and the specific vulnerable feature or endpoint is not detailed in available data.

Information Disclosure Drupal Owl Carousel 2
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy