CVE-2025-31476

{
  "id": "CVE-2025-31476",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-31476",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-04-07T15:38:25.383742Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "security-advisories@github.com",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.1",
          "baseScore": 4.8,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
          "integrityImpact": "LOW",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 2.7,
        "exploitabilityScore": 1.7
      }
    ]
  },
  "affected": [
    {
      "source": "security-advisories@github.com",
      "affectedData": [
        {
          "vendor": "AmauriC",
          "product": "tarteaucitron.js",
          "versions": [
            {
              "status": "affected",
              "version": "< 1.20.1"
            }
          ]
        }
      ]
    }
  ],
  "published": "2025-04-07T15:15:44.370",
  "references": [
    {
      "url": "https://github.com/AmauriC/tarteaucitron.js/commit/2fa1e01023bce2e4b813200600bb1619d56ceb02",
      "tags": [
        "Patch"
      ],
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://github.com/AmauriC/tarteaucitron.js/security/advisories/GHSA-p5g4-v748-6fh8",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://www.drupal.org/sa-contrib-2025-027",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "security-advisories@github.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-79"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "tarteaucitron.js is a compliant and accessible cookie banner. A vulnerability was identified in tarteaucitron.js, allowing a user with high privileges (access to the site's source code or a CMS plugin) to enter a URL containing an insecure scheme such as javascript:alert(). Before the fix, URL validation was insufficient, which could allow arbitrary JavaScript execution if a user clicked on a malicious link. An attacker with high privileges could insert a link exploiting an insecure URL scheme, leading to execution of arbitrary JavaScript code, theft of sensitive data through phishing attacks, or modification of the user interface behavior. This vulnerability is fixed in 1.20.1."
    },
    {
      "lang": "es",
      "value": "tarteaucitron.js es un banner de cookies compatible y accesible. Se identificó una vulnerabilidad en tarteaucitron.js que permitía a un usuario con privilegios elevados (acceso al código fuente del sitio o a un complemento de CMS) introducir una URL con un esquema inseguro como javascript:alert(). Antes de la corrección, la validación de URL era insuficiente, lo que podía permitir la ejecución arbitraria de JavaScript si un usuario hacía clic en un enlace malicioso. Un atacante con privilegios elevados podría insertar un enlace aprovechando un esquema de URL inseguro, lo que provocaría la ejecución de código JavaScript arbitrario, el robo de datos confidenciales mediante ataques de phishing o la modificación del comportamiento de la interfaz de usuario. Esta vulnerabilidad se corrigió en la versión 1.20.1."
    }
  ],
  "lastModified": "2026-06-17T09:10:28.123",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:amauri:tarteaucitronjs:*:*:*:*:*:node.js:*:*",
              "vulnerable": true,
              "matchCriteriaId": "ECAC1B54-E872-41FB-841F-E8590B2A9512",
              "versionEndExcluding": "1.20.1"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:tacjs_project:tacjs:*:*:*:*:*:drupal:*:*",
              "vulnerable": true,
              "matchCriteriaId": "048B09B9-98A2-45BD-AF3C-4D1E4132B8AD",
              "versionEndExcluding": "8.x-6.7",
              "versionStartIncluding": "8.x-1.0"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security-advisories@github.com"
}