8.2
CVE-2025-31678
- EPSS 0.35%
- Veröffentlicht 31.03.2025 22:15:20
- Zuletzt bearbeitet 04.06.2025 15:07:11
- CVE-Watchlists
- Unerledigt
LoginAI (Artificial Intelligence) - Moderately critical - Access bypass, Information Disclosure - SA-CONTRIB-2025-004
Missing Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Forceful Browsing.This issue affects AI (Artificial Intelligence): from 0.0.0 before 1.0.3.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Artificial Intelligence Project ≫ Artificial Intelligence SwPlatformdrupal Version < 1.0.3
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.35% | 0.272 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| CISA-ADP | 8.2 | 3.9 | 4.2 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
|
CWE-862 Missing Authorization
The product does not perform an authorization check when an actor attempts to access a resource or perform an action.
https://www.drupal.org/sa-contrib-2025-004