CVE-2025-7031CWE-306

Config Pages Viewer - Critical - Access bypass - SA-CONTRIB-2025-086

Medium · published July 8, 2025

CVSS v3.1
5.3
EPSS
0%
Percentile
23.2
In the wild
Unconfirmed
What it is

Missing Authentication for Critical Function vulnerability in Drupal Config Pages Viewer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Config Pages Viewer: from 0.0.0 before 1.0.4.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00315 · 23.2th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2025-07-08T20:54Z
EPSS history
Timeline
  • 08 JUL 20:54Z
    Config Pages Viewer - Critical - Access bypass - SA-CONTRIB-2025-086
    cvelistv5