CVE-2025-31683
2 advisories.
Packagist/drupal/google_tag CVE-2025-31683: medium 6.8, EPSS 0.18%
Drupal Google Tag Cross-Site Request Forgery (CSRF)
Action: Upgrade drupal/google_tag to 1.8.0 or later.
composer require drupal/google_tag:1.8.0composer require drupal/google_tag:2.0.8Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.8.0 | - |
| 2.0.0 | 2.0.8 | - |
Fixed versions
| 1.8.0 | 2.0.8 |
Sources
- osv: GHSA-qchr-8m24-7v66
- https://nvd.nist.gov/vuln/detail/CVE-2025-31683
- https://git.drupalcode.org/project/google_tag
- https://www.drupal.org/sa-contrib-2025-012
CVE-2025-31683 · published · modified · JSON
Packagist/drupal/google_tag CVE-2025-31683: unknown, EPSS 0.18%
This module enables you to integrate the site with the Google Tag Manager (GTM) application.
Action: Upgrade drupal/google_tag to 1.8.0 or later.
composer require drupal/google_tag:1.8.0composer require drupal/google_tag:2.0.8Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.8.0 | - |
| 2.0.0 | 2.0.8 | - |
Fixed versions
| 1.8.0 | 2.0.8 |
Sources
CVE-2025-31683 · published · modified · JSON