{"self":"https:\/\/www.drupal.org\/api-d7\/node?field_sa_cve=CVE-2025-48009","first":"https:\/\/www.drupal.org\/api-d7\/node?field_sa_cve=CVE-2025-48009\u0026page=0","last":"https:\/\/www.drupal.org\/api-d7\/node?field_sa_cve=CVE-2025-48009\u0026page=0","list":[{"field_issue_status":"7","field_project":{"uri":"https:\/\/www.drupal.org\/api-d7\/node\/3192640","id":"3192640","resource":"node"},"field_sa_advisory_id":"060","field_sa_coordinated_by":{"value":"\u003Cul\u003E\n\u003Cli\u003E\u003Ca href=\u0022\/u\/greggles\u0022 rel=\u0022nofollow\u0022\u003EGreg Knaddison (greggles)\u003C\/a\u003E of the Drupal Security Team\n\u003C\/li\u003E\u003Cli\u003E\u003Ca href=\u0022\/u\/poker10\u0022 rel=\u0022nofollow\u0022\u003EJuraj Nemec (poker10)\u003C\/a\u003E of the Drupal Security Team\n\u003C\/li\u003E\u003C\/ul\u003E","format":"1"},"field_sa_criticality":"AC:Complex\/A:User\/CI:Some\/II:None\/E:Theoretical\/TD:All","field_sa_description":{"value":"\u003Cp\u003EThis module enables you to seamlessly migrate and deploy content across environments, eliminating manual steps. It simplifies the process by exporting content to a YML file or a ZIP archive, which can be imported into another environment effortlessly.\u003C\/p\u003E\n\u003Cp\u003EWhile the export feature rightfully bypasses implemented access controls, enabling it to extract all entity data, including private and confidential information, to the mentioned formats, it fails to adequately safeguard the generated output. \u003C\/p\u003E\n\u003Cp\u003EThis vulnerability is mitigated by the fact that an attacker must have a role with the permission \u0022export single content\u0022 or \u0022Allow user to export all content\u0022.\u003C\/p\u003E","format":"1"},"field_sa_fixed_by":{"value":"\u003Cul\u003E\n\u003Cli\u003E\u003Ca href=\u0022\/u\/longwave\u0022 rel=\u0022nofollow\u0022\u003EDave Long (longwave)\u003C\/a\u003E of the Drupal Security Team\n\u003C\/li\u003E\u003Cli\u003E\u003Ca href=\u0022\/u\/mxr576\u0022 rel=\u0022nofollow\u0022\u003EDezs\u0151 Bicz\u00f3 (mxr576)\u003C\/a\u003E\n\u003C\/li\u003E\u003Cli\u003E\u003Ca href=\u0022\/u\/nginex\u0022 rel=\u0022nofollow\u0022\u003EOleksandr Kuzava (nginex)\u003C\/a\u003E\n\u003C\/li\u003E\u003C\/ul\u003E","format":"1"},"field_sa_reported_by":{"value":"\u003Cul\u003E\n\u003Cli\u003E\u003Ca href=\u0022\/u\/mxr576\u0022 rel=\u0022nofollow\u0022\u003EDezs\u0151 Bicz\u00f3 (mxr576)\u003C\/a\u003E\n\u003C\/li\u003E\u003C\/ul\u003E","format":"1"},"field_sa_solution":{"value":"\u003Cp\u003EInstall the latest version:\u003C\/p\u003E\n\u003Cul\u003E\n\u003Cli\u003EIf you use the Single Content Sync module for Drupal, upgrade to \u003Ca href=\u0022https:\/\/www.drupal.org\/project\/single_content_sync\/releases\/1.4.12\u0022 rel=\u0022nofollow\u0022\u003ESingle Content Sync 1.4.12.\u003C\/a\u003E\u003C\/li\u003E\n\u003C\/ul\u003E","format":"1"},"field_sa_type":"Access bypass","field_issue_last_status_change":"1747245904","field_sa_cve":["CVE-2025-48009"],"field_is_psa":"0","field_affected_versions":"\u003C1.4.12","field_fixed_in":[{"uri":"https:\/\/www.drupal.org\/api-d7\/node\/3524414","id":"3524414","resource":"node"}],"nid":"3524510","vid":"13994254","is_new":false,"type":"sa","title":"Single Content Sync - Moderately critical - Access bypass - SA-CONTRIB-2025-060","language":"en","url":"https:\/\/www.drupal.org\/sa-contrib-2025-060","edit_url":"https:\/\/www.drupal.org\/node\/3524510\/edit","status":"1","promote":"0","sticky":"0","created":"1747245904","changed":"1747245904","author":{"uri":"https:\/\/www.drupal.org\/api-d7\/user\/406161","id":"406161","resource":"user","name":"Drupal Security Team"},"comment":"0","comments":[{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16108801","id":16108801,"resource":"comment"},{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16108802","id":16108802,"resource":"comment"},{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16108803","id":16108803,"resource":"comment"},{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16108804","id":16108804,"resource":"comment"},{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16108805","id":16108805,"resource":"comment"}],"comment_count":0,"comment_count_new":false,"body":[],"feeds_item_guid":null,"feeds_item_url":null,"feed_nid":null,"flag_flag_tracker_follow_user":[],"flag_tracker_follower_count":null,"has_new_content":null,"last_comment_timestamp":"1747245904"}]}