Lucene search
+L

CVE-2022-25277

🗓️ 26 Apr 2023 15:15:00Reported by ubuntu.comType 
ubuntucve
 ubuntucve
🔗 ubuntu.com👁 33 Views

Drupal core fails to properly sanitize filenames with dangerous extensions leading to possible remote code execution on Apache servers

Related
Packages
Refs
ReporterTitlePublishedViews
Family
bdu_fstec
BDU FSTEC
Drupal Code Execution
2 Aug 202200:00
–bdu_fstec
circl
Circl
CVE-2022-25277
25 Jul 202208:03
–circl
cnnvd
CNNVD
Drupal code-related vulnerabilities
21 Jul 202200:00
–cnnvd
cve
CVE
CVE-2022-25277
26 Apr 202300:00
–cve
cvelist
Cvelist
CVE-2022-25277
26 Apr 202300:00
–cvelist
debiancve
Debian CVE
CVE-2022-25277
29 Oct 202616:24
–debiancve
drupal
Drupal
Drupal core - Critical - Arbitrary PHP code execution - SA-CORE-2022-014
20 Jul 202200:00
–drupal
nessus
Tenable Nessus
Drupal 7.x < 7.91 / 9.3.x < 9.3.19 / 9.4.x < 9.4.3 Multiple Vulnerabilities (drupal-2022-07-20)
21 Jul 202200:00
–nessus
nessus
Tenable Nessus
Linux Distros Unpatched Vulnerability : CVE-2022-25277
6 Aug 202500:00
–nessus
nessus
Tenable Nessus
Drupal 9.4.x < 9.4.3 Multiple Vulnerabilities
21 Jul 202200:00
–nessus
Rows per page
OSOS VersionArchitecturePackagePackage VersionFilename
Ubuntu16.04alldrupal70drupal7_0_all.deb
Ubuntu14.04alldrupal70drupal7_0_all.deb

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

26 Aug 2025 12:43Current
7.5High risk
Vulners AI Score7.5
CVSS 3.17.2
EPSS0.01422
SSVC
33