Lucene search
Veracode Vulnerability DatabaseVERACODE:40281HistoryApr 25, 2023 - 11:46 a.m.
Access Bypass
2023-04-2511:46:46
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
access bypass
api access
sensitive information
0.0005 Low
EPSS
Percentile
17.6%
drupal is vulnerable to Access Bypass. The vulnerability exits in process_input parameter of FormBuilder.php because of the API access element not properly evaluate . which allows an attacker to access sensitive information in the system.
References
github.com/drupal/core/commit/0993e9f63e8c03f6c1e1c482b0985c89eaa485ee
github.com/drupal/core/commit/2d1a5f12c25a4a7211daf19afef81dd6a190c077
github.com/drupal/drupal/commit/2eb18f57786ece5daf1536dfae852b9d20cf74db
github.com/drupal/drupal/commit/80c942650a00ee01621e9207399bc05c0f8c22f1
www.drupal.org/sa-core-2022-013
Related
osv
osv
Access bypass in Drupal Core
2023-04-24 20:30:38
CVE-2022-25278
2023-04-26 15:15:08
BIT-drupal-2022-25278
2024-03-06 10:52:33
ubuntucve
ubuntucve
CVE-2022-25278
2023-04-26 00:00:00
drupal
drupal
Drupal core - Moderately critical - Access Bypass - SA-CORE-2022-013
2022-07-20 00:00:00
openvas
openvas
Drupal 8.0 < 9.3.19, 9.4.0 < 9.4.3 Access Bypass (SA-CORE-2022-013) - Linux
2022-10-17 00:00:00
nvd
nvd
CVE-2022-25278
2023-04-26 15:15:08
prion
prion
Code injection
2023-04-26 15:15:00
cvelist
cvelist
CVE-2022-25278
2023-04-26 00:00:00
cve
cve
CVE-2022-25278
2023-04-26 15:15:08
github
github
Access bypass in Drupal Core
2023-04-24 20:30:38
friendsofphp
friendsofphp
Drupal core - Moderately critical - Access Bypass - SA-CORE-2022-013
2022-07-20 10:11:30
nessus
nessus