PatchTheCVErestrict route by ip vulnerabilities and fixes
Recent CVEs affecting restrict route by ip, with upgrade or downgrade steps. 1 tracked.
Also searched as: restrictroutebyip.
restrict route by ip has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2025-05-14. Highest priority: CVE-2025-47701 (score 33/100).
- CVE-2025-47701 HIGH 8.8 UPGRADE Cross-Site Request Forgery (CSRF) vulnerability in Drupal Restrict route by IP allows Cross Site Request Forge
FAQ
How do I fix restrict route by ip vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is restrict route by ip being exploited right now?
None of the tracked restrict route by ip CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which restrict route by ip CVE should I patch first?
CVE-2025-47701 currently ranks highest (33/100): Cross-Site Request Forgery (CSRF) vulnerability in Drupal Restrict route by IP allows Cross Site Request Forge.