Miggo Logo
Miggo Vulnerability Database
→
CVE-2025-12082

CVE-2025-12082: Drupal CivicTheme Design System allows Forceful Browsing

7.5

CVSS Score
3.1

Basic Information

CVE ID
CVE-2025-12082
GHSA ID
GHSA-qxr9-f877-9842
EPSS Score
0.08156%
CWE
CWE-863
Published
10/30/2025
Updated
10/30/2025
KEV Status
No
Technology
TechnologyPHP

Technical Details

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Package NameEcosystemVulnerable VersionsFirst Patched Version
drupal/civicthemecomposer< 1.12.01.12.0

Vulnerability Intelligence
Miggo AIMiggo AI

Miggo AIRoot Cause Analysis

No analysis provided

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

WAF Protection Rules

WAF Rule

In*orr**t *ut*oriz*tion vuln*r**ility in *rup*l *ivi*T**m* **si*n Syst*m *llows *or***ul *rowsin*. T*is issu* *****ts *ivi*T**m* **si*n Syst*m: *rom *.*.* ***or* *.**.*.

Reasoning

No *n*lysis provi***