## Drupal core - Moderately critical - Information disclosure - SA-CORE-2025-008

- 種別: advisory
- 重大度: critical
- 関連技術: drupal, php
- CVE: CVE-2025-13083
- 公開日時: 2025-11-12T20:16:22.000Z
- 情報源: Drupal Security Advisories (https://www.drupal.org/sa-core-2025-008)
- パーマリンク: https://vulnpulse.app/items/drupal-security-ade6b0c23db3

Project: Drupal core Project machine name: drupal Date: 2025-November-12 Security risk: Moderately critical 10 ∕ 25 AC:Complex/A:None/CI:Some/II:None/E:Theoretical/TD:Uncommon Vulnerability: Information disclosure Affected versions: >= 8.0.0 < 10.4.9 || >= 10.5.0 < 10.5.6 || >= 11.0.0 < 11.1.9 || >= 11.2.0 < 11.2.8 CVE IDs: CVE-2025-13083 Description: The core system module handles downloads of private and temporary files. Contrib modules can define additional kinds of files (schemes) that may also be handled by the system module. In some cases, files may be served with the HTTP header Cache-…