Early access. This site has moved to bugrater.com.

Security releases

Drupal

Drupal core - Critical - Cross site scripting - SA-CORE-2025-001

SA-CORE-2025-001 Feb 19, 2025 Source: Vendor

Imported by the Drupal advisory catcher from https://www.drupal.org/sa-core-2025-001. 10 reporter(s), 2 fixer(s). Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://www.drupal.org/sa-core-2025-001
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

12 lines
Showing 1–12 of 12
CVE-2025-3057 BR2025-0000-008713 unclaimed
Drupal core - Critical - Cross site scripting - SA-CORE-2025-001
Credited as Arne (arkepp)
CVE-2025-3057 BR2025-0000-008714 unclaimed
Drupal core - Critical - Cross site scripting - SA-CORE-2025-001
Credited as bdanin
CVE-2025-3057 BR2025-0000-008715 unclaimed
Drupal core - Critical - Cross site scripting - SA-CORE-2025-001
Credited as Douglas Groene (dgroene)
CVE-2025-3057 BR2025-0000-008716 unclaimed
Drupal core - Critical - Cross site scripting - SA-CORE-2025-001
Credited as Dragos Dumitrescu (dragos-dumi)
CVE-2025-3057 BR2025-0000-008717 unclaimed
Drupal core - Critical - Cross site scripting - SA-CORE-2025-001
Credited as Flo Kosiol (flokosiol)
CVE-2025-3057 BR2025-0000-008718 unclaimed
Drupal core - Critical - Cross site scripting - SA-CORE-2025-001
Credited as Gerardo Cadau (juanramonperez)
CVE-2025-3057 BR2025-0000-008719 unclaimed
Drupal core - Critical - Cross site scripting - SA-CORE-2025-001
Credited as Justin Christoffersen (larsdesigns)
CVE-2025-3057 BR2025-0000-008720 unclaimed
Drupal core - Critical - Cross site scripting - SA-CORE-2025-001
Credited as nuwans
CVE-2025-3057 BR2025-0000-008721 unclaimed
Drupal core - Critical - Cross site scripting - SA-CORE-2025-001
Credited as Sven Decabooter (svendecabooter)
CVE-2025-3057 BR2025-0000-008722 unclaimed
Drupal core - Critical - Cross site scripting - SA-CORE-2025-001
Credited as Will Gunn (wgunn_e)
CVE-2025-3057 BR2025-0000-008723 unclaimed
Drupal core - Critical - Cross site scripting - SA-CORE-2025-001
Credited as catch (catch) of the Drupal Security Team
CVE-2025-3057 BR2025-0000-008724 unclaimed
Drupal core - Critical - Cross site scripting - SA-CORE-2025-001
Credited as Drew Webber (mcdruid) of the Drupal Security