CVE-2025-9553 - Vulnerability Details - OpenCVE

Vulnerability in Drupal API Key manager.This issue affects API Key manager: *.*.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Drupal	Api Key Manager Drupal

No data.

No data.

References

Link	Providers
https://www.drupal.org/sa-contrib-2025-103

History

Tue, 21 Oct 2025 13:15:00 +0000

Type	Values Removed	Values Added
First Time appeared		Drupal Drupal api Key Manager Drupal drupal
Vendors & Products		Drupal Drupal api Key Manager Drupal drupal

Wed, 15 Oct 2025 20:15:00 +0000

Type	Values Removed	Values Added
Metrics		cvssV3_1 `{'score': 5.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'}` ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Fri, 10 Oct 2025 22:30:00 +0000

Type	Values Removed	Values Added
Description		Vulnerability in Drupal API Key manager.This issue affects API Key manager: ..
Title		API Key manager - Critical - Unsupported - SA-CONTRIB-2025-103
References		https://www.drupal.org/sa-contrib-2025-103

MITRE

Status: PUBLISHED

Assigner: drupal

Published: 2025-10-10T22:25:36.628Z

Updated: 2025-10-15T19:21:28.347Z

Reserved: 2025-08-27T16:08:34.423Z

Link: CVE-2025-9553

Vulnrichment

Updated: 2025-10-15T19:21:19.844Z

NVD

Status : Awaiting Analysis

Published: 2025-10-10T23:15:37.523

Modified: 2025-10-15T20:15:37.457

Link: CVE-2025-9553

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-9553", "assignerOrgId": "2c85b837-eb8b-40ed-9d74-228c62987387", "state": "PUBLISHED", "assignerShortName": "drupal", "dateReserved": "2025-08-27T16:08:34.423Z", "datePublished": "2025-10-10T22:25:36.628Z", "dateUpdated": "2025-10-15T19:21:28.347Z"}, "containers": {"cna": {"affected": [{"collectionURL": "https://www.drupal.org/project/api_key_manager", "defaultStatus": "unaffected", "product": "API Key manager", "repo": "https://git.drupalcode.org/project/api_key_manager", "vendor": "Drupal", "versions": [{"status": "affected", "version": "*.*", "versionType": "semver"}]}], "datePublic": "2025-08-27T17:20:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Vulnerability in Drupal API Key manager.<p>This issue affects API Key manager: *.*.</p>"}], "value": "Vulnerability in Drupal API Key manager.This issue affects API Key manager: *.*."}], "providerMetadata": {"orgId": "2c85b837-eb8b-40ed-9d74-228c62987387", "shortName": "drupal", "dateUpdated": "2025-10-10T22:25:36.628Z"}, "references": [{"url": "https://www.drupal.org/sa-contrib-2025-103"}], "source": {"discovery": "UNKNOWN"}, "title": "API Key manager - Critical - Unsupported - SA-CONTRIB-2025-103", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "lang": "en", "description": "CWE-noinfo Not enough information"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2025-10-15T19:21:03.341495Z", "id": "CVE-2025-9553", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-10-15T19:21:28.347Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2025-9553", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-10-15T19:21:03.341495Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "description": "CWE-noinfo Not enough information"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-10-15T19:21:19.844Z"}}], "cna": {"title": "API Key manager - Critical - Unsupported - SA-CONTRIB-2025-103", "source": {"discovery": "UNKNOWN"}, "affected": [{"repo": "https://git.drupalcode.org/project/api_key_manager", "vendor": "Drupal", "product": "API Key manager", "versions": [{"status": "affected", "version": "*.*", "versionType": "semver"}], "collectionURL": "https://www.drupal.org/project/api_key_manager", "defaultStatus": "unaffected"}], "datePublic": "2025-08-27T17:20:00.000Z", "references": [{"url": "https://www.drupal.org/sa-contrib-2025-103"}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "Vulnerability in Drupal API Key manager.This issue affects API Key manager: *.*.", "supportingMedia": [{"type": "text/html", "value": "Vulnerability in Drupal API Key manager.<p>This issue affects API Key manager: *.*.</p>", "base64": false}]}], "providerMetadata": {"orgId": "2c85b837-eb8b-40ed-9d74-228c62987387", "shortName": "drupal", "dateUpdated": "2025-10-10T22:25:36.628Z"}}}, "cveMetadata": {"cveId": "CVE-2025-9553", "state": "PUBLISHED", "dateUpdated": "2025-10-15T19:21:28.347Z", "dateReserved": "2025-08-27T16:08:34.423Z", "assignerOrgId": "2c85b837-eb8b-40ed-9d74-228c62987387", "datePublished": "2025-10-10T22:25:36.628Z", "assignerShortName": "drupal"}, "dataVersion": "5.1"}