backdropcms Vulnerabilities and Affected Products
Vulnerabilities associated with Masquerade.
Products
Clear product- backdrop3 vulnerabilities
- Bootstrap 5 Lite theme1 vulnerability
- Bootstrap Lite theme1 vulnerability
- Flag1 vulnerability
- GDPR cookies module for Backdrop CMS1 vulnerability
- Link iframe formatter1 vulnerability
- Mail Disguise1 vulnerability
- Masquerade1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2025-27822HIGH | An issue was discovered in the Masquerade module before 1.x-1.0.1 for Backdrop CMS. It allows people to temporarily switch to another user account. The module provides a "Masquerade as admin" permission to restrict people (who can masquerade) from switching to an account with administrative privileges. This permission is not always honored and may allow non-administrative users to masquerade as an administrator. This vulnerability is mitigated by the fact that an attacker must have a role with t… CWE-863Mar 7, 2025 | CVSS7.5v3.1 | EPSS0.286% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |