Boletines de Vulnerabilidades

Drupal core - Moderately critical - Access bypass - SA-CORE-2025-002

   
Software afectado Drupal
 
Project: Drupal coreDate: 2025-February-19Security risk: Moderately critical 13 ∕ 25 AC:Basic/A:User/CI:Some/II:Some/E:Theoretical/TD:DefaultVulnerability: Access bypassAffected versions: >= 8.0.0 = 10.4.0 = 11.0.0 = 11.1.0 CVE IDs: CVE-2025-31673Description: Bulk operations allow authorized users to modify several nodes at once from the Content page (/admin/content). A site builder can also add bulk operations to other pages using Views.A bug in the core Actions system allows some

More info:

https://www.drupal.org/sa-core-2025-002