logo

Database

Improper authorization control for web services In drupal/drupal

Description

Improper access control

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Package
Affected version
Patched versions

Aliases

1. CVE-2022-252752. NVD-2022-252753. OSV-2022-252754. GCVE-2022-25275

References

1. https://www.drupal.org/sa-core-2022-0122. https://github.com/drupal/core/commit/2d5f47fc8a166115f56c2330a81e83abe22445cf3. https://github.com/drupal/core/commit/e2fbf63700819cb470a1be425798f1a3f20201164. https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/core/CVE-2022-25275.yaml

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.