CVE-2022-25273
Summary
| CVE | CVE-2022-25273 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2023-04-26 14:15:00 UTC |
| Updated | 2023-05-09 18:47:00 UTC |
| Description | Drupal core's form API has a vulnerability where certain contributed or custom modules' forms may be vulnerable to improper input validation. This could allow an attacker to inject disallowed values or overwrite data. Affected forms are uncommon, but in certain cases an attacker could alter critical or sensitive data. |
Risk And Classification
Problem Types: CWE-20
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Drupal core - Moderately critical - Improper input validation - SA-CORE-2022-008 | Drupal.org | CONFIRM | www.drupal.org | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 154139 Drupal Core: Improper Input Validation Vulnerability (CVE-2022-25273)