CVE-2025-3475

CVE-2025-3475: WEB-T - Moderately critical - Access bypass, Denial of service - SA-CONTRIB-2025-030

Vendor Drupal

Product WEB-T

Weakness CWE-770 · Uncontrolled resource consumption

Published April 9, 2025

Last update April 9, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Allocation of Resources Without Limits or Throttling, Incorrect Authorization vulnerability in Drupal WEB-T allows Excessive Allocation, Content Spoofing.This issue affects WEB-T: from 0.0.0 before 1.1.0.

Key dates

02Disclosure timeline

April 9, 2025 CVE published

April 9, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-3475 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/770.html AskarLabs — CWE-770 write-up Allocation of Resources Without Limits or Throttling

Related vulnerabilities

04Related CVE

CVE-2025-4416 Events Log Track - Moderately critical - Denial of Service - SA-CONTRIB-2025-059 CVE-2025-3734 Stage File Proxy - Moderately critical - Denial of Service - SA-CONTRIB-2025-035 CVE-2026-81285 WordPress Smush Image Compression and Optimization plugin <= 4.2.0 - Denial of Service Attack vulnerability CVE-2025-48448 Admin Audit Trail - Less critical - Denial of Service - SA-CONTRIB-2025-068