CVE-2019-25012

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-01-01 · updated 2026-06-17
Weakness: CWE-425

Description

The Webform Report project 7.x-1.x-dev for Drupal allows remote attackers to view submissions by visiting the /rss.xml page. NOTE: This project is not covered by Drupal's security advisory policy.

Affected products

Webform Report Project Webform Report: 7.x-1.x-dev

References

https://www.drupal.org/project/webform_report/issues/3101410
https://www.drupal.org/project/webform_report/issues/3101410

Get alerted when CVE-2019-25012 or the next vulnerability affects your stack