PT-2026-5204 · Drupal · Drupal Entity Share

Bram Driesen + 8 · CVE-2025-13985 · Publicado 2026-01-28 · Atualizado 2026-02-06

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Drupal Entity Share versions prior to 3.13.0

Description An authorization issue exists in Drupal Entity Share that permits forceful browsing. This flaw potentially allows unauthorized access to resources.

Recommendations Update Drupal Entity Share to version 3.13.0 or later.

Correção

Incorrect Authorization

Enumeração de Fraquezas

CWE-863

Identificadores relacionados

CVE-2025-13985

DRUPAL-CONTRIB-2025-123

Produtos afetados

Drupal Entity Share

Referências · 6

• https://t.me/cveNotify/151182 · Publicação no Telegram
• https://drupal.org/sa-contrib-2025-123 · Aviso do Fabricante
• https://t.me/CVEtracker/43184 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2025-13985 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2025-13985 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/2016616580591898806 · Publicação no Twitter