Restrict Route By Ip

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2026-107255 Oct 30, 03:09 PHP PATCH This Week

Incorrect Authorization vulnerability in Drupal Restrict route by IP allows Forceful Browsing. This issue affects Restrict route by IP versions: from 0.0.0 to 1.3.1, from 2.0.0 to 2.0.1.

PHP Authentication Bypass Drupal Restrict Route By Ip

NVD

EPSS

0.1%

CVE-2025-47701 May 14, 17:15 PHP HIGH PATCH This Month

Cross-Site Request Forgery (CSRF) vulnerability in Drupal Restrict route by IP allows Cross Site Request Forgery.0.0 before 1.3.0. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF Drupal Restrict Route By Ip

NVD

CVSS 3.1

8.8

EPSS

0.1%

CVE-2026-107255 PHP

EPSS 0%

PATCH This Week

Incorrect Authorization vulnerability in Drupal Restrict route by IP allows Forceful Browsing. This issue affects Restrict route by IP versions: from 0.0.0 to 1.3.1, from 2.0.0 to 2.0.1.

PHP Authentication Bypass Drupal +1

NVD

CVE-2025-47701 PHP

EPSS 0% CVSS 8.8

HIGH PATCH This Month

CSRF Drupal Restrict Route By Ip

NVD