目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

Drupal 厂商漏洞列表 / CVE 中文分析 398

Drupal 厂商相关 398 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

Drupal 是广泛使用的开源内容管理系统，核心用于构建网站与数字体验。其历史漏洞多涉及远程代码执行、跨站脚本及权限绕过，常因配置不当或插件缺陷引发。尽管具备完善的安全更新机制，但累计 295 条 CVE 显示其攻击面较大。用户需及时修补并强化访问控制，以应对持续演变的安全威胁，确保系统稳定运行。

Top products by Drupal: Drupal Core core Open Social AI (Artificial Intelligence) Enterprise MFA - TFA for Drupal Drupal Canvas COOKiES Consent Management Two-factor Authentication (TFA) Tagify Disable Login Page Facets Gammu SMS Daemon One Time Password Monster Menus OpenID Connect / OAuth client Authenticator Login Login Disable Colorbox Paragraphs table Diff POST File Acquia DAM AI Agents Paragraphs Advanced Content Feedback (aka admin_feedback) Google Tag SAML SSO - Service Provider Quick Node Block Simple Klaro Klaro Cookie & Consent Management
CVE ID 标题 CVSS 风险等级 Published
CVE-2025-3129 Drupal Access code 安全漏洞 — Access code CWE-307 9.8AI Critical AI 2025-04-02
CVE-2025-3062 Drupal Admin LTE theme 授权问题漏洞 — Drupal Admin LTE theme 9.1 - 2025-03-31
CVE-2025-3061 Drupal Material Admin 安全漏洞 — Material Admin 9.8 - 2025-03-31
CVE-2025-3060 Drupal Flattern 安全漏洞 — Flattern – Multipurpose Bootstrap Business Profile 8.2 - 2025-03-31
CVE-2025-3059 Drupal Profile Private 安全漏洞 — Profile Private 8.2 - 2025-03-31
CVE-2025-31697 Drupal Formatter Suite 跨站脚本漏洞 — Formatter Suite CWE-79 6.1 - 2025-03-31
CVE-2025-31696 Drupal RapiDoc OAS Field Formatter 跨站脚本漏洞 — RapiDoc OAS Field Formatter CWE-79 6.1 - 2025-03-31
CVE-2025-31695 Drupal Link field display mode formatter 跨站脚本漏洞 — Link field display mode formatter CWE-79 6.1 - 2025-03-31
CVE-2025-31694 Drupal Two-factor Authentication 安全漏洞 — Two-factor Authentication (TFA) CWE-288 9.4 - 2025-03-31
CVE-2025-31693 Drupal AI 操作系统命令注入漏洞 — AI (Artificial Intelligence) CWE-78 8.8 - 2025-03-31
CVE-2025-31692 Drupal AI 操作系统命令注入漏洞 — AI (Artificial Intelligence) CWE-78 8.8 - 2025-03-31
CVE-2025-31691 Drupal OAuth2 Server 安全漏洞 — OAuth2 Server CWE-862 7.5 - 2025-03-31
CVE-2025-31690 Drupal Cache Utility 跨站请求伪造漏洞 — Cache Utility CWE-352 8.8 - 2025-03-31
CVE-2025-31689 Drupal General Data Protection Regulation 跨站请求伪造漏洞 — General Data Protection Regulation CWE-352 8.8 - 2025-03-31
CVE-2025-31688 Drupal Configuration Split 跨站请求伪造漏洞 — Configuration Split CWE-352 8.8 - 2025-03-31
CVE-2025-31687 Drupal SpamSpan filter 跨站脚本漏洞 — SpamSpan filter CWE-79 6.1 - 2025-03-31
CVE-2025-31686 Drupal Open Social 安全漏洞 — Open Social CWE-862 7.5 - 2025-03-31
CVE-2025-31685 Drupal Open Social 安全漏洞 — Open Social CWE-862 7.5 - 2025-03-31
CVE-2025-31684 Drupal OAuth2 Client 跨站请求伪造漏洞 — OAuth2 Client CWE-352 8.8 - 2025-03-31
CVE-2025-31683 Drupal Google Tag 跨站请求伪造漏洞 — Google Tag CWE-352 8.8 - 2025-03-31
CVE-2025-31682 Drupal Google Tag 跨站脚本漏洞 — Google Tag CWE-79 6.1 - 2025-03-31
CVE-2025-31681 Drupal Authenticator Login 安全漏洞 — Authenticator Login CWE-862 7.5 - 2025-03-31
CVE-2025-31680 Drupal Matomo Analytics 跨站请求伪造漏洞 — Matomo Analytics CWE-352 8.8 - 2025-03-31
CVE-2025-31679 Drupal Ignition Error Pages 跨站脚本漏洞 — Ignition Error Pages CWE-79 6.1 - 2025-03-31
CVE-2025-31678 Drupal AI 安全漏洞 — AI (Artificial Intelligence) CWE-862 9.4 - 2025-03-31
CVE-2025-31677 Drupal AI 跨站请求伪造漏洞 — AI (Artificial Intelligence) CWE-352 8.8 - 2025-03-31
CVE-2025-31676 Drupal Email TFA 安全漏洞 — Email TFA CWE-1390 9.8 - 2025-03-31
CVE-2025-31675 Drupal core 跨站脚本漏洞 — Drupal core CWE-79 6.1 - 2025-03-31
CVE-2025-31674 Drupal core 安全漏洞 — Drupal core CWE-915 9.8 - 2025-03-31
CVE-2025-31673 Drupal core 安全漏洞 — Drupal core CWE-863 6.5 - 2025-03-31

本页汇总了 Drupal 厂商截至目前公开的全部 398 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。