Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2022-25273

Опубликовано: 26 апр. 2023
Источник: nvd
CVSS3: 7.5
EPSS Низкий

Описание

Drupal core's form API has a vulnerability where certain contributed or custom modules' forms may be vulnerable to improper input validation. This could allow an attacker to inject disallowed values or overwrite data. Affected forms are uncommon, but in certain cases an attacker could alter critical or sensitive data.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*
Версия от 8.0.0 (включая) до 9.2.18 (исключая)
cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*
Версия от 9.3.0 (включая) до 9.3.12 (исключая)

EPSS

Процентиль: 40%
0.00177
Низкий

7.5 High

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 7.5
ubuntu
около 2 лет назад

Drupal core's form API has a vulnerability where certain contributed or custom modules' forms may be vulnerable to improper input validation. This could allow an attacker to inject disallowed values or overwrite data. Affected forms are uncommon, but in certain cases an attacker could alter critical or sensitive data.

CVSS3: 7.5
debian
около 2 лет назад

Drupal core's form API has a vulnerability where certain contributed o ...

CVSS3: 7.5
github
около 2 лет назад

Improper input validation in Drupal core

EPSS

Процентиль: 40%
0.00177
Низкий

7.5 High

CVSS3

Дефекты

CWE-20