CVE-2025-13082

—

CVSS 3.1

4.3 medium

EPSS

<1%p13

Published

Nov 18, 2025 (Nov 18, 2025)

Modified

Jun 17, 2026

Description

User Interface (UI) Misrepresentation of Critical Information vulnerability in Drupal Drupal core allows Content Spoofing.This issue affects Drupal core: from 8.0.0 before 10.4.9, from 10.5.0 before 10.5.6, from 11.0.0 before 11.1.9, from 11.2.0 before 11.2.8.

Vendors: drupal
Products: drupal
Ecosystems: Drupal
Weakness: CWE-451
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.