—
DRUPAL-CONTRIB-2025-095
Details
This module enables you to provide SEO analysis and recommendations for a given URL.
The module doesn't sufficiently sanitize user-supplied URLs, leading to a Server-side request forgery (SSRF) vulnerability.
This vulnerability is mitigated by the fact that an attacker must have a role with the permission "access seo analyzer".
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist:https://packages.drupal.org/8/drupal/ai_seo_link_advisor
Introduced in:
0Fixed in: 1.0.6Upgrade drupal/ai_seo_link_advisor to 1.0.6 or newer (ecosystem packagist:https://packages.drupal.org/8).