CVE-2025-13083

score

<0.1

cvss

3.7

epss

0.3%

published

2025-11-18

kev added

—

first seen

2026-10-21

Drupal core from 8.0.0 before 10.4.9, 10.5.0 before 10.5.6, 11.0.0 before 11.1.9, and 11.2.0 before 11.2.8 contains a use of web browser cache with sensitive information caused by incorrectly configured access control security levels, letting attackers exploit cached sensitive data, exploit requires misconfiguration of access control.