## Drupal core - Moderately critical - Defacement - SA-CORE-2025-007

- 種別: advisory
- 重大度: critical
- 関連技術: drupal, php
- CVE: CVE-2025-13082
- 公開日時: 2025-11-12T20:16:21.000Z
- 情報源: Drupal Security Advisories (https://www.drupal.org/sa-core-2025-007)
- パーマリンク: https://vulnpulse.app/items/drupal-security-51f69b037f52

Project: Drupal core Project machine name: drupal Date: 2025-November-12 Security risk: Moderately critical 10 ∕ 25 AC:Basic/A:None/CI:None/II:None/E:Theoretical/TD:All Vulnerability: Defacement Affected versions: >= 8.0.0 < 10.4.9 || >= 10.5.0 < 10.5.6 || >= 11.0.0 < 11.1.9 || >= 11.2.0 < 11.2.8 CVE IDs: CVE-2025-13082 Description: By generating and tricking a user into visiting a malicious URL, an attacker can perform site defacement. The defacement is not stored and is only present when the URL has been crafted for that purpose. Only the defacement is present, so no other site content (suc…