Drupal 厂商相关 576 条 CVE 漏洞,含 AI 中文分析、POC、CVSS 评分与受影响产品。
Drupal 是广泛使用的开源内容管理系统,核心用于构建网站与数字体验。其历史漏洞多涉及远程代码执行、跨站脚本及权限绕过,常因配置不当或插件缺陷引发。尽管具备完善的安全更新机制,但累计 295 条 CVE 显示其攻击面较大。用户需及时修补并强化访问控制,以应对持续演变的安全威胁,确保系统稳定运行。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2025-7392 | Drupal Cookies Addons 安全漏洞 — Cookies Addons CWE-79 | 6.1 | - | 2025-07-21 |
| CVE-2025-7393 | Drupal Mail Login 安全漏洞 — Mail Login CWE-307 | 9.8 | - | 2025-07-21 |
| CVE-2025-7031 | Drupal Config Pages Viewer 安全漏洞 — Config Pages Viewer CWE-306 | 9.1AI | Critical AI | 2025-07-08 |
| CVE-2025-7030 | Drupal Two-factor Authentication 安全漏洞 — Two-factor Authentication (TFA) CWE-267 | 8.1AI | High AI | 2025-07-08 |
| CVE-2025-6677 | Drupal Paragraphs table 安全漏洞 — Paragraphs table CWE-79 | 6.1AI | Medium AI | 2025-06-26 |
| CVE-2025-6676 | Drupal Simple XML sitemap 安全漏洞 — Simple XML sitemap CWE-79 | 6.1AI | Medium AI | 2025-06-26 |
| CVE-2025-6675 | Drupal Enterprise MFA - TFA for Drupal 安全漏洞 — Enterprise MFA - TFA for Drupal CWE-288 | 9.8AI | Critical AI | 2025-06-26 |
| CVE-2025-6674 | Drupal CKEditor5 Youtube 安全漏洞 — CKEditor5 Youtube CWE-79 | 6.1AI | Medium AI | 2025-06-26 |
| CVE-2025-5682 | Drupal Klaro Cookie & Consent Management 安全漏洞 — Klaro Cookie & Consent Management CWE-79 | 6.1AI | Medium AI | 2025-06-26 |
| CVE-2025-48921 | Drupal Open Social 安全漏洞 — Open Social CWE-352 | 8.8AI | High AI | 2025-06-26 |
| CVE-2025-48922 | Drupal GLightbox 安全漏洞 — GLightbox CWE-79 | 6.1AI | Medium AI | 2025-06-26 |
| CVE-2025-48923 | Drupal Toc.Js 安全漏洞 — Toc.js CWE-79 | 6.1AI | Medium AI | 2025-06-26 |
| CVE-2025-48915 | Drupal COOKiES Consent Management 安全漏洞 — COOKiES Consent Management CWE-79 | 6.1AI | Medium AI | 2025-06-13 |
| CVE-2025-48914 | Drupal COOKiES Consent Management 安全漏洞 — COOKiES Consent Management CWE-79 | 6.1AI | Medium AI | 2025-06-13 |
| CVE-2025-48920 | Drupal etracker 安全漏洞 — etracker CWE-79 | 6.1AI | Medium AI | 2025-06-13 |
| CVE-2025-48919 | Drupal Simple Klaro 安全漏洞 — Simple Klaro CWE-79 | 6.1AI | Medium AI | 2025-06-13 |
| CVE-2025-48917 | EU Cookie Compliance 安全漏洞 — EU Cookie Compliance (GDPR Compliance) CWE-79 | 6.1AI | Medium AI | 2025-06-13 |
| CVE-2025-48918 | Drupal Simple Klaro 安全漏洞 — Simple Klaro CWE-79 | 6.1AI | Medium AI | 2025-06-13 |
| CVE-2025-48916 | Drupal Bookable Calendar 安全漏洞 — Bookable Calendar CWE-862 | 7.5AI | High AI | 2025-06-13 |
| CVE-2025-48447 | Drupal Lightgallery 安全漏洞 — Lightgallery CWE-79 | 6.1AI | Medium AI | 2025-06-11 |
| CVE-2025-48448 | Drupal Admin Audit Trail 安全漏洞 — Admin Audit Trail CWE-770 | 8.1AI | High AI | 2025-06-11 |
| CVE-2025-48446 | Drupal Commerce Alphabank Redirect 安全漏洞 — Commerce Alphabank Redirect CWE-863 | 9.4AI | Critical AI | 2025-06-11 |
| CVE-2025-48445 | Drupal Commerce Eurobank (Redirect) 安全漏洞 — Commerce Eurobank (Redirect) CWE-863 | 9.8AI | Critical AI | 2025-06-11 |
| CVE-2025-48013 | Drupal Quick Node Block 安全漏洞 — Quick Node Block CWE-862 | 7.5AI | High AI | 2025-06-11 |
| CVE-2025-48444 | Drupal Quick Node Block 安全漏洞 — Quick Node Block CWE-862 | 7.5AI | High AI | 2025-06-11 |
| CVE-2025-48012 | Drupal One Time Password 安全漏洞 — One Time Password CWE-294 | 9.1AI | Critical AI | 2025-05-21 |
| CVE-2025-48011 | Drupal One Time Password 安全漏洞 — One Time Password CWE-288 | 9.8AI | Critical AI | 2025-05-21 |
| CVE-2025-48010 | Drupal One Time Password 安全漏洞 — One Time Password CWE-288 | 9.8AI | Critical AI | 2025-05-21 |
| CVE-2025-48009 | Drupal Single Content Sync 安全漏洞 — Single Content Sync CWE-862 | 9.8AI | Critical AI | 2025-05-21 |
| CVE-2025-4416 | Drupal Events Log Track 安全漏洞 — Events Log Track CWE-770 | 6.5AI | Medium AI | 2025-05-21 |
本页汇总了 Drupal 厂商截至目前公开的全部 576 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接,并附带 AI 生成的中文分析以便快速判断风险。