GHSA-jv6r-mj9p-9xffMediumCVSS 8.1

Drupal General Data Protection Regulation Cross-Site Request Forgery (CSRF) vulnerability

Published
April 1, 2025
Last Modified
April 29, 2025

🔗 CVE IDs covered (1)

CVE-2025-31689 →

📋 Description

Cross-Site Request Forgery (CSRF) vulnerability in Drupal General Data Protection Regulation allows Cross Site Request Forgery. This issue affects General Data Protection Regulation: from 0.0.0 before 3.0.1, from 3.1.0 before 3.1.2.

🎯 Affected products2

  • composer/drupal/gdpr:< 3.0.1
  • composer/drupal/gdpr:>= 3.1.0, < 3.1.2

🔗 References (4)