CVE-2025-10929

Reverse Proxy Header - Less critical - Access bypass - SA-CONTRIB-2025-111 PUBLISHED

Description (CNA)

Improper Validation of Consistency within Input vulnerability in Drupal Reverse Proxy Header allows Manipulating User-Controlled Variables.This issue affects Reverse Proxy Header: from 0.0.0 before 1.1.2.

Affected (CNA)

Vendor / product	Versions
Drupal / Reverse Proxy Header	affected 0.0.0 before 1.1.2

CWE

CWE-1288

References

https://www.drupal.org/sa-contrib-2025-111

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.