CVE-2025-47701 - Restrict route by IP - Critical - Cross Site Request Forgery

Back Back to CVE browser

HIGH

Restrict route by IP - Critical - Cross Site Request Forgery - SA-CONTRIB-2025-047

Published May 14, 2025

8.8

HIGH

CVSS 3.1

EPSS 0.19%

Description

Cross-Site Request Forgery (CSRF) vulnerability in Drupal Restrict route by IP allows Cross Site Request Forgery.This issue affects Restrict route by IP: from 0.0.0 before 1.3.0.

Affected products

Vendor Drupal Product Restrict route by IP Default
unaffected
- Version
  0.0.0
  Status
  affected
  Constraints
  <1.3.0

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Drupal

Restrict route by IP

unaffected

Version	Status	Constraints
0.0.0	affected	<1.3.0

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-352

CSRF

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-14937
Advisory
https://www.drupal.org/sa-contrib-2025-047
Vendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-14937		Advisory
https://www.drupal.org/sa-contrib-2025-047		Vendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner drupal

Published May 14, 2025

Updated May 20, 2025

Reserved May 7, 2025

Link CVE-2025-47701

CISA Vulnrichment

Updated May 20, 2025

NVD

Status Analyzed

Modified Jun 17, 2026

Link CVE-2025-47701

Red Hat

Severity n/a

Public date n/a

Links CVE-2025-47701

ENISA EUVD

Assigner drupal

Published May 14, 2025

Updated May 20, 2025

Exploited since n/a

Link EUVD-2025-14937

EUVD-2025-14937