PT-2026-5207 · Drupal · Drupal Http Client Manager

Adriano Cori + 2 · Publicado 2025-12-17 · Atualizado 2026-02-06 · CVE-2025-14840

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Drupal HTTP Client Manager versions prior to 9.3.13 Drupal HTTP Client Manager versions 10.0.0 through 10.0.2 Drupal HTTP Client Manager versions 11.0.0 through 11.0.1

Description An improper check for unusual or exceptional conditions exists in the Drupal HTTP Client Manager, potentially allowing for forceful browsing. This issue relates to how the HTTP Client Manager handles certain conditions, which could be exploited.

Recommendations Update Drupal HTTP Client Manager to a version beyond 9.3.13. Update Drupal HTTP Client Manager to a version beyond 10.0.2. Update Drupal HTTP Client Manager to a version beyond 11.0.1.

Correção

Improper Check for Exceptional Conditions

Enumeração de Fraquezas

CWE-754

Identificadores relacionados

CVE-2025-14840

DRUPAL-CONTRIB-2025-126

Produtos afetados

Drupal Http Client Manager

Referências · 7

• https://drupal.org/sa-contrib-2025-126 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2025-14840 · Nota de Segurança
• https://twitter.com/CVEnew/status/2016616577504772533 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2025-14840 · Aviso do Fabricante
• https://t.me/cveNotify/151174 · Publicação no Telegram
• https://t.me/CVEtracker/43187 · Publicação no Telegram
• https://osv.dev/vulnerability/DRUPAL-CONTRIB-2025-126 · Aviso do Fabricante