Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2022-25278
6.5
MEDIUMCVSS v3
Severity scale
010
Description
Under certain circumstances, the Drupal core form API evaluates form element access incorrectly. This may lead to a user being able to alter data they should not have access to. No forms provided by Drupal core are known to be vulnerable. However, forms added through contributed or custom modules or themes may be affected.
drupal/drupal
GitHubVerbatim mirror of the git.drupal.org repository for Drupal core. Please see the https://github.com/drupal/drupal#contributing. PRs are not accepted on GitHub.
GitHubVerbatim mirror of the git.drupal.org repository for Drupal core. Please see the https://github.com/drupal/drupal#contributing. PRs are not accepted on GitHub.>= 9.4.0, < 9.4.3, >= 8.0.0, < 9.3.19NVD
drupal
RubyGemsComing Soon! This gem is in development - Dont use it, Drupal integration with rails app
RubyGemsComing Soon! This gem is in development - Dont use it, Drupal integration with rails app>= 9.4.0, < 9.4.3, >= 8.0.0, < 9.3.19NVD
NPM