← Back

CVE-2025-10929

nvd nist
Published: Oct 30, 2025Modified: Jun 17, 2026

JSON object

Loading...
5.3
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Exploitability: 3.9 / Impact: 1.4
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Improper Validation of Consistency within Input vulnerability in Drupal Reverse Proxy Header allows Manipulating User-Controlled Variables.This issue affects Reverse Proxy Header: from 0.0.0 before 1.1.2.

Affected (1)

Reverse Proxy Header Project
1 product
Reverse Proxy Header
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Reverse Proxy Header
Before 1.1.2

Related CWEs

CWE-1288
Improper Validation of Consistency within Input
The product receives a complex input with multiple elements or fields that must be consistent with each other, but it does not validate or incorrectly validates that the input is actually consistent.

References (1)

Source: mlhess@drupal.org
PatchVendor Advisory

Timeline

No history available yet.