Vulnerability advisory

BIT-drupal-2025-13082

Drupal core - Moderately critical - Defacement - SA-CORE-2025-007

Published Updated OSV record ↗

Also known as CVE-2025-13082DRUPAL-CORE-2025-007GHSA-h89p-5896-f4q8

Severity

Severity not reported.

Affected versions

drupal Bitnami

AffectedFixed in
8.0.0 to before 10.4.910.4.9
10.5.0 to before 10.5.610.5.6
11.0.0 to before 11.1.911.1.9
11.2.0 to before 11.2.811.2.8

Severity for this package

  • CVSS 3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Description

User Interface (UI) Misrepresentation of Critical Information vulnerability in Drupal Drupal core allows Content Spoofing.This issue affects Drupal core: from 8.0.0 before 10.4.9, from 10.5.0 before 10.5.6, from 11.0.0 before 11.1.9, from 11.2.0 before 11.2.8.

References

  • Codex
  • Claude Code
  • VS Code
  • GitHub Copilot
  • Cursor
  • Cline
  • Windsurf
  • Google Anti-gravity
  • OpenCode
  • Pi
  • Gemini CLI
  • Hermes Agent
  • Zed
  • Junie
  • Qwen Code
  • Kiro
  • Kilo Code
  • Factory Droid

Set up GitHits for your agents

Run this command:

<> bash
npx githits@latest init

What happens next:

  1. Opens your browser to authorize GitHits
  2. Asks whether to set up GitHits at the user or project level
  3. Detects your supported AI coding tools
  4. Lets you choose which tools to configure
  5. Configures the selected tools