CVE-2025-3062 - Vulnerability Details - OpenCVE

ReportizFlow

Vulnerability in Drupal Drupal Admin LTE theme.This issue affects Drupal Admin LTE theme: *.*.

No CVSS v4.0

Attack Vector Network

Attack Complexity High

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact total

Vendors	Products
Admin Lte Theme Project	Admin Lte Theme

Configuration 1 [-]

cpe:2.3:a:admin_lte_theme_project:admin_lte_theme:*:*:*:*:*:drupal:*:*

No data.

References

Link	Providers
https://www.drupal.org/sa-contrib-2025-010

History

Tue, 02 Sep 2025 19:00:00 +0000

Type	Values Removed	Values Added
First Time appeared		Admin Lte Theme Project Admin Lte Theme Project admin Lte Theme
CPEs		cpe:2.3:a:admin_lte_theme_project:admin_lte_theme::::::drupal::*
Vendors & Products		Admin Lte Theme Project Admin Lte Theme Project admin Lte Theme

Tue, 01 Apr 2025 18:15:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-287
Metrics		cvssV3_1 `{'score': 6.6, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'}` ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Mon, 31 Mar 2025 22:45:00 +0000

Type	Values Removed	Values Added
Description		Vulnerability in Drupal Drupal Admin LTE theme.This issue affects Drupal Admin LTE theme: ..
Title		Drupal Admin LTE theme - Critical - Unsupported - SA-CONTRIB-2025-010
References		https://www.drupal.org/sa-contrib-2025-010

MITRE

Status: PUBLISHED

Assigner: drupal

Published: 2025-03-31T22:22:22.245Z

Updated: 2025-04-01T17:35:27.388Z

Reserved: 2025-03-31T22:20:13.605Z

Link: CVE-2025-3062

Vulnrichment

Updated: 2025-04-01T17:34:58.620Z

NVD

Status : Analyzed

Published: 2025-03-31T23:15:30.630

Modified: 2025-09-02T18:34:04.673

Link: CVE-2025-3062

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-3062", "assignerOrgId": "2c85b837-eb8b-40ed-9d74-228c62987387", "state": "PUBLISHED", "assignerShortName": "drupal", "dateReserved": "2025-03-31T22:20:13.605Z", "datePublished": "2025-03-31T22:22:22.245Z", "dateUpdated": "2025-04-01T17:35:27.388Z"}, "containers": {"cna": {"affected": [{"collectionURL": "https://www.drupal.org/project/druadmin_lte_theme", "defaultStatus": "unaffected", "product": "Drupal Admin LTE theme", "repo": "https://git.drupalcode.org/project/druadmin_lte_theme", "vendor": "Drupal", "versions": [{"status": "affected", "version": "*.*", "versionType": "semver"}]}], "datePublic": "2025-01-29T16:57:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Vulnerability in Drupal Drupal Admin LTE theme.<p>This issue affects Drupal Admin LTE theme: *.*.</p>"}], "value": "Vulnerability in Drupal Drupal Admin LTE theme.This issue affects Drupal Admin LTE theme: *.*."}], "providerMetadata": {"orgId": "2c85b837-eb8b-40ed-9d74-228c62987387", "shortName": "drupal", "dateUpdated": "2025-03-31T22:22:22.245Z"}, "references": [{"url": "https://www.drupal.org/sa-contrib-2025-010"}], "source": {"discovery": "UNKNOWN"}, "title": "Drupal Admin LTE theme - Critical - Unsupported - SA-CONTRIB-2025-010", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-287", "lang": "en", "description": "CWE-287 Improper Authentication"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.6, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2025-04-01T17:35:16.745694Z", "id": "CVE-2025-3062", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-04-01T17:35:27.388Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.6, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2025-3062", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-04-01T17:35:16.745694Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-287", "description": "CWE-287 Improper Authentication"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-04-01T17:34:58.620Z"}}], "cna": {"title": "Drupal Admin LTE theme - Critical - Unsupported - SA-CONTRIB-2025-010", "source": {"discovery": "UNKNOWN"}, "affected": [{"repo": "https://git.drupalcode.org/project/druadmin_lte_theme", "vendor": "Drupal", "product": "Drupal Admin LTE theme", "versions": [{"status": "affected", "version": "*.*", "versionType": "semver"}], "collectionURL": "https://www.drupal.org/project/druadmin_lte_theme", "defaultStatus": "unaffected"}], "datePublic": "2025-01-29T16:57:00.000Z", "references": [{"url": "https://www.drupal.org/sa-contrib-2025-010"}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "Vulnerability in Drupal Drupal Admin LTE theme.This issue affects Drupal Admin LTE theme: *.*.", "supportingMedia": [{"type": "text/html", "value": "Vulnerability in Drupal Drupal Admin LTE theme.<p>This issue affects Drupal Admin LTE theme: *.*.</p>", "base64": false}]}], "providerMetadata": {"orgId": "2c85b837-eb8b-40ed-9d74-228c62987387", "shortName": "drupal", "dateUpdated": "2025-03-31T22:22:22.245Z"}}}, "cveMetadata": {"cveId": "CVE-2025-3062", "state": "PUBLISHED", "dateUpdated": "2025-04-01T17:35:27.388Z", "dateReserved": "2025-03-31T22:20:13.605Z", "assignerOrgId": "2c85b837-eb8b-40ed-9d74-228c62987387", "datePublished": "2025-03-31T22:22:22.245Z", "assignerShortName": "drupal"}, "dataVersion": "5.1"}