## Drupal core - Moderately critical - Denial of Service - SA-CORE-2025-005

- 種別: advisory
- 重大度: critical
- 関連技術: drupal, php
- CVE: CVE-2025-13080
- 公開日時: 2025-11-12T18:33:05.000Z
- 情報源: Drupal Security Advisories (https://www.drupal.org/sa-core-2025-005)
- パーマリンク: https://vulnpulse.app/items/drupal-security-bc267769d1c2

Project: Drupal core Project machine name: drupal Date: 2025-November-12 Security risk: Moderately critical 13 ∕ 25 AC:Basic/A:None/CI:None/II:Some/E:Theoretical/TD:All Vulnerability: Denial of Service Affected versions: >= 8.0.0 < 10.4.9 || >= 10.5.0 < 10.5.6 || >= 11.0.0 < 11.1.9 || >= 11.2.0 < 11.2.8 CVE IDs: CVE-2025-13080 Description: Drupal Core has a rarely used feature, provided by an underlying library, which allows certain attributes of incoming HTTP requests to be overridden. This functionality can be abused in a way that may cause Drupal to cache response data that it should not.…