CVE-2025-47701: Restrict route by IP - Critical - Cross Site Request Forgery - SA-CONTRIB-2025-047
Published May 14, 2025
·Updated
Cross-Site Request Forgery (CSRF) vulnerability in Drupal Restrict route by IP allows Cross Site Request Forgery.This issue affects Restrict route by IP: from 0.0.0 before 1.3.0.
Affected Software
2 affected components
Drupal Restrict route by IP>0.0.0, <1.3.0
Restrict Route By Ip Project Restrict Route By Ip Drupal>=1.0.0<1.3.0
Event History
May 14, 2025
CVE Published
via MITRE·05:01 PM
Data Sourced
via MITRE·05:01 PM
DescriptionWeakness
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-47701?
CVE-2025-47701 is considered a high severity Cross-Site Request Forgery (CSRF) vulnerability.
2
How do I fix CVE-2025-47701?
To fix CVE-2025-47701, upgrade the Drupal Restrict route by IP module to version 1.3.0 or higher.
3
Which versions are affected by CVE-2025-47701?
CVE-2025-47701 affects Drupal Restrict route by IP versions from 0.0.0 up to but not including 1.3.0.
4
What type of vulnerability is CVE-2025-47701?
CVE-2025-47701 is a Cross-Site Request Forgery (CSRF) vulnerability that allows unauthorized commands to be carried out.
5
Who is impacted by CVE-2025-47701?
Users of the Drupal Restrict route by IP module prior to version 1.3.0 are impacted by CVE-2025-47701.