{"id":"drupal-security-ade6b0c23db3","seq":2018,"kind":"advisory","title":"Drupal core - Moderately critical - Information disclosure - SA-CORE-2025-008","url":"https://www.drupal.org/sa-core-2025-008","permalink":"https://vulnpulse.app/items/drupal-security-ade6b0c23db3","summary":"Project: Drupal core Project machine name: drupal Date: 2025-November-12 Security risk: Moderately critical 10 ∕ 25 AC:Complex/A:None/CI:Some/II:None/E:Theoretical/TD:Uncommon Vulnerability: Information disclosure Affected versions: >= 8.0.0 < 10.4.9 || >= 10.5.0 < 10.5.6 || >= 11.0.0 < 11.1.9 || >= 11.2.0 < 11.2.8 CVE IDs: CVE-2025-13083 Description: The core system module handles downloads of private and temporary files. Contrib modules can define additional kinds of files (schemes) that may also be handled by the system module. In some cases, files may be served with the HTTP header Cache-…","severity":"critical","techs":["drupal","php"],"cves":["CVE-2025-13083"],"tags":["security"],"source":{"id":"drupal-security","name":"Drupal Security Advisories"},"published_at":"2025-11-12T20:16:22.000Z","fetched_at":"2026-10-21T16:17:45.699Z"}