Vulnerability in Drupal Core

CVE-2022-25278

Under certain circumstances, the Drupal core form API evaluates form element access incorrectly. This may lead to a user being able to alter data they should not have access to. No forms provided by Drupal core are known to be vulnerable…

EPSS: 0.005 (65.4th percentile) — read the EPSS interpretation.

Affected products

References