Restrict route by IP vulnerabilities

2 known vulnerabilities in Restrict route by IP from Drupal. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.3 High severity

  Restrict route by IP: Incorrect Authorization

  CVE-2026-107255Oct 30, 2026Drupal

  Incorrect Authorization vulnerability in Drupal Restrict route by IP allows Forceful Browsing. This issue affects Restrict route by IP versions: from 0.0.0 to 1.3.1, from 2.0.0 to 2.0.1.

• 8.8 High severity

  Restrict route by IP: Cross-Site Request Forgery

  CVE-2025-47701May 14, 2025Drupal

  Cross-Site Request Forgery (CSRF) vulnerability in Drupal Restrict route by IP allows Cross Site Request Forgery.This issue affects Restrict route by IP: from 0.0.0 before 1.3.0.