PT-2025-44357 · Drupal · Drupal Reverse Proxy Header

Bohdan Artemchuk + 4 · Published 2025-10-29 · Updated 2025-10-30 · CVE-2025-10929

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Drupal Reverse Proxy Header versions prior to 1.1.2

Description An improper validation of consistency within input exists in Drupal Reverse Proxy Header, allowing manipulation of user-controlled variables.

Recommendations Update to version 1.1.2 or later.

Fix

Weakness Enumeration

CWE-1288

Related Identifiers

CVE-2025-10929

DRUPAL-CONTRIB-2025-111

GHSA-FG8X-Q69G-4QP3

Affected Products

Drupal Reverse Proxy Header

References · 8

• https://drupal.org/sa-contrib-2025-111 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-10929 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-fg8x-q69g-4qp3 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-10929 · Security Note
• https://t.me/cveNotify/140912 · Telegram Post
• https://twitter.com/CVEnew/status/1983678034306564456 · Twitter Post
• https://t.me/CVEtracker/36139 · Telegram Post
• https://t.me/cveNotify/140951 · Telegram Post