Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2022-25276
6.1
MEDIUMCVSS v3
Severity scale
010
Description
The Media oEmbed iframe route does not properly validate the iframe domain setting, which allows embeds to be displayed in the context of the primary domain. Under certain circumstances, this could lead to cross-site scripting, leaked cookies, or other vulnerabilities.
drupal/drupal
GitHubVerbatim mirror of the git.drupal.org repository for Drupal core. Please see the https://github.com/drupal/drupal#contributing. PRs are not accepted on GitHub.
GitHubVerbatim mirror of the git.drupal.org repository for Drupal core. Please see the https://github.com/drupal/drupal#contributing. PRs are not accepted on GitHub.>= 9.4.0, < 9.4.3, >= 9.3.0, < 9.3.19NVD
drupal
RubyGemsComing Soon! This gem is in development - Dont use it, Drupal integration with rails app
RubyGemsComing Soon! This gem is in development - Dont use it, Drupal integration with rails app>= 9.4.0, < 9.4.3, >= 9.3.0, < 9.3.19NVD
NPM