Vulnerability in Drupal Core
CVE-2022-25278
Under certain circumstances, the Drupal core form API evaluates form element access incorrectly. This may lead to a user being able to alter data they should not have access to. No forms provided by Drupal core are known to be vulnerable…
EPSS: 0.005 (65.4th percentile) — read the EPSS interpretation.
Affected products
- Drupal Core — versions 9.4, 9.3