Vulnerability in Drupal Core

CVE-2025-13081

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Drupal core allows Object Injection.This issue affects Drupal core: from 8.0.0 before 10.4.9, from 10.5.0 before 10.5.6, from 11.0.0 bef…

Vulnerability class: Mass Assignment

EPSS: 0.001 (33.0th percentile) — read the EPSS interpretation.