CVE-2025-3904

Summary

CVE-2025-3904 is a newly disclosed vulnerability affecting Drupal Sportsleague. The issue resides in the Sportsleague module, which is used for managing sports competitions on Drupal websites. Successful exploitation of this vulnerability could lead to arbitrary code execution, allowing attackers to gain unauthorized access to affected systems and potentially take control. Drupal users are advised to update their Sportsleague modules to the latest version as soon as possible to mitigate this risk. Failure to do so may result in compromised data or system takeover.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.