Executive brief
Drupal core allows Forceful Browsing
Affected products
- Packagist drupal/core
Junglewise Threat Intelligence
CVE-2025-13080: Drupal core allows Forceful Browsing
CVE-2025-13080 · Severity: medium · CVSS 4 · Published 2025-11-18
Technologies: drupal/core (Packagist). Vendors: Packagist.