CVE-2025-3131

score

<0.1

cvss

5.4

epss

0.2%

published

2025-04-09

kev added

—

first seen

2026-10-21

Drupal ECA: Event - Condition - Action versions before 1.1.12, 2.0.16, 2.1.7, and 1.2.* contain a cross-site request forgery caused by insufficient request validation, letting attackers perform unauthorized actions, exploit requires victim to be authenticated and visit malicious site.