CVE-2025-31481
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Apr 3, 2025
Updated: Apr 8, 2025
CWE ID 863
Summary
CVE-2025-31481 is a vulnerability affecting API Platform Core, an API development system. This issue permits bypassing configured security on specific operations using the Relay special node type. Notably, this vulnerability has been addressed in API Platform Core versions 4.0.22 and 3.4.17.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.