CVE-2025-7031

5.3 mediumEPSS 0.3%

Medium (5.3) in config pages viewer project config pages viewer. EPSS 0.3% chance of exploitation in the next 30 days.

Missing Authentication for Critical Function vulnerability in Drupal Config Pages Viewer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Config Pages Viewer: from 0.0.0 before 1.0.4.

Severity

CVSS 3.1

5.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 24% of CVEs (scores of 2026-10-31)
CWE: CWE-306
Published: 2025-07-08
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

config_pages_viewer_project:config_pages_viewer

References

https://www.drupal.org/sa-contrib-2025-086

Check your stack JSON