logo

Database

Improper authorization control for web services In drupal/drupal

Description

Improper Access Control

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Package
Affected version
Patched versions

Aliases

1. CVE-2022-252782. NVD-2022-252783. OSV-2022-252784. GCVE-2022-25278

References

1. https://www.drupal.org/sa-core-2022-0132. https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/core/CVE-2022-25278.yaml

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.