## Drupal core - Moderately critical - Access bypass - SA-CORE-2025-002

- 種別: advisory
- 重大度: critical
- 関連技術: drupal, php
- CVE: CVE-2025-31673
- 公開日時: 2025-02-19T16:58:10.000Z
- 情報源: Drupal Security Advisories (https://www.drupal.org/sa-core-2025-002)
- パーマリンク: https://vulnpulse.app/items/drupal-security-882c9b0da286

Project: Drupal core Project machine name: drupal Date: 2025-February-19 Security risk: Moderately critical 13 ∕ 25 AC:Basic/A:User/CI:Some/II:Some/E:Theoretical/TD:Default Vulnerability: Access bypass Affected versions: >= 8.0.0 < 10.3.13 || >= 10.4.0 < 10.4.3 || >= 11.0.0 < 11.0.12 || >= 11.1.0 < 11.1.3 CVE IDs: CVE-2025-31673 Description: Bulk operations allow authorized users to modify several nodes at once from the Content page ( /admin/content ). A site builder can also add bulk operations to other pages using Views. A bug in the core Actions system allows some users to modify some fiel…