BugRater
Early access: the directory is still filling out, and every rating here is a reported experience.

Security releases

Drupal

Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2025-004

SA-CORE-2025-004 Mar 19, 2025 Source: Vendor

Imported by the Drupal advisory catcher from https://www.drupal.org/sa-core-2025-004. 1 reporter(s), 14 fixer(s). Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://www.drupal.org/sa-core-2025-004
Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

14 lines
All 14 CVEs 14 Additional recognition 0 Unclaimed only
Showing 1–14 of 14
CVE-2025-31675 BR2025-0000-008689 unclaimed
Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2025-004
Credited as Samuel Mortenson (samuel.mortenson)
CVE-2025-31675 BR2025-0000-008690 unclaimed
Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2025-004
Credited as Anna Kalata (akalata), provisional member of the Drupal Security Team
CVE-2025-31675 BR2025-0000-008691 unclaimed
Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2025-004
Credited as Alex Pott (alexpott) of the Drupal Security Team
CVE-2025-31675 BR2025-0000-008692 unclaimed
Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2025-004
Credited as Benji Fisher (benjifisher) of the Drupal Security Team
CVE-2025-31675 BR2025-0000-008693 unclaimed
Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2025-004
Credited as Bram Driesen (bramdriesen), provisional member of the Drupal Security Team
CVE-2025-31675 BR2025-0000-008694 unclaimed
Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2025-004
Credited as catch (catch) of the Drupal Security Team
CVE-2025-31675 BR2025-0000-008695 unclaimed
Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2025-004
Credited as Alex Bronstein (effulgentsia) of the Drupal Security Team
CVE-2025-31675 BR2025-0000-008696 unclaimed
Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2025-004
Credited as Jen Lampton (jenlampton), provisional member of the Drupal Security Team
CVE-2025-31675 BR2025-0000-008697 unclaimed
Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2025-004
Credited as Lee Rowlands (larowlan) of the Drupal Security Team
CVE-2025-31675 BR2025-0000-008698 unclaimed
Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2025-004
Credited as Dave Long (longwave) of the Drupal Security Team
CVE-2025-31675 BR2025-0000-008699 unclaimed
Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2025-004
Credited as Drew Webber (mcdruid) of the Drupal Security Team
CVE-2025-31675 BR2025-0000-008700 unclaimed
Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2025-004
Credited as Joseph Zhao (pandaski), provisional member of the Drupal Security Team
CVE-2025-31675 BR2025-0000-008701 unclaimed
Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2025-004
Credited as Adam G-H (phenaproxima)
CVE-2025-31675 BR2025-0000-008702 unclaimed
Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2025-004
Credited as Jess (xjm) of the Drupal Security Team