Lucene search
PRIOn knowledge basePRION:CVE-2022-25278HistoryApr 26, 2023 - 3:15 p.m.
Code injection
2023-04-2615:15:00
PRIOn knowledge base
www.prio-n.com
7
code injection
data alteration
user access
Under certain circumstances, the Drupal core form API evaluates form element access incorrectly. This may lead to a user being able to alter data they should not have access to. No forms provided by Drupal core are known to be vulnerable. However, forms added through contributed or custom modules or themes may be affected.
References
Related
osv
osv
Access bypass in Drupal Core
2023-04-24 20:30:38
CVE-2022-25278
2023-04-26 15:15:08
BIT-drupal-2022-25278
2024-03-06 10:52:33
ubuntucve
ubuntucve
CVE-2022-25278
2023-04-26 00:00:00
drupal
drupal
Drupal core - Moderately critical - Access Bypass - SA-CORE-2022-013
2022-07-20 00:00:00
openvas
openvas
Drupal 8.0 < 9.3.19, 9.4.0 < 9.4.3 Access Bypass (SA-CORE-2022-013) - Linux
2022-10-17 00:00:00
nvd
nvd
CVE-2022-25278
2023-04-26 15:15:08
veracode
veracode
Access Bypass
2023-04-25 11:46:46
cvelist
cvelist
CVE-2022-25278
2023-04-26 00:00:00
cve
cve
CVE-2022-25278
2023-04-26 15:15:08
github
github
Access bypass in Drupal Core
2023-04-24 20:30:38
friendsofphp
friendsofphp
Drupal core - Moderately critical - Access Bypass - SA-CORE-2022-013
2022-07-20 10:11:30
nessus
nessus