CVE-2025-13080

CVE-2025-13080: Drupal core - Moderately critical - Denial of Service - SA-CORE-2025-005

Vendor Drupal
Product Drupal core
Weakness CWE-754
Published November 18, 2025
Last update November 18, 2025

CVSS base score

What the vulnerability does

Description

Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal Drupal core allows Forceful Browsing.This issue affects Drupal core: from 8.0.0 before 10.4.9, from 10.5.0 before 10.5.6, from 11.0.0 before 11.1.9, from 11.2.0 before 11.2.8.

Key dates

Disclosure timeline

November 18, 2025 CVE published
November 18, 2025 Record updated