Drupal core versions from 8.0.0 before 10.4.9, 10.5.0 before 10.5.6, 11.0.0 before 11.1.9, and 11.2.0 before 11.2.8 contain a vulnerability that allows forceful browsing due to improper checks for unusual or exceptional conditions. This vulnerability is identified as CVE-2025-13080 and has a medium severity with a CVSS score of 6.9. Fixed versions are available, and patches have been released to address this issue.