CVE-2025-10929
Medium · 5.3Drupal Reverse Proxy Header allows Manipulating User-Controlled Variables
CVSS
5.3
EPSS
0.3%
Published
Oct 30, 2025
CISA due date
—
The record
Improper Validation of Consistency within Input vulnerability in Drupal Reverse Proxy Header allows Manipulating User-Controlled Variables. This issue affects Reverse Proxy Header: from 0.0.0 before 1.1.2.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Packagist | drupal/reverse_proxy_header | 0 | 1.1.2 |
| Packagist:https://packages.drupal.org/8 | drupal/reverse_proxy_header | 0 | 1.1.2 |
Related vulnerabilities
- CVE-2026-18238 The rpcap client code that processes a RPCAP_MSG_PACKET message received from the server… CWE-1288
- CVE-2026-18794 The OpenRGB network protocol allows attackers to cause memory exhaustion and… CWE-1288
- CVE-2026-73219 CVAT is an open source interactive video and image annotation tool for computer vision. CWE-1288
- CVE-2026-42982 Improper validation of consistency within input in Windows Secure Kernel Mode allows an… CWE-1288
- CVE-2026-9689 A flaw was found in Keycloak, an open-source identity and access management solution. CWE-1288
- CVE-2026-43001 An issue was discovered in OpenStack Keystone before 29.0.2. CWE-1288
- CVE-2026-31431 In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead… CWE-1288
- CVE-2022-50976 A local attacker could cause a full device reset by resetting the device passwords using… CWE-1288