PT-2026-5204 · Drupal · Drupal Entity Share

Bram Driesen + 8 · Published 2026-01-28 · Updated 2026-02-06 · CVE-2025-13985

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Drupal Entity Share versions prior to 3.13.0

Description An authorization issue exists in Drupal Entity Share that permits forceful browsing. This flaw potentially allows unauthorized access to resources.

Recommendations Update Drupal Entity Share to version 3.13.0 or later.

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2025-13985

DRUPAL-CONTRIB-2025-123

Affected Products

Drupal Entity Share

References · 6

• https://drupal.org/sa-contrib-2025-123 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-13985 · Security Note
• https://osv.dev/vulnerability/CVE-2025-13985 · Vendor Advisory
• https://t.me/cveNotify/151182 · Telegram Post
• https://t.me/CVEtracker/43184 · Telegram Post
• https://twitter.com/CVEnew/status/2016616580591898806 · Twitter Post