Packagist/drupal/core CVE-2022-25277: unknown, EPSS 1.42%

*Updated 2022-07-20 19:45 UTC to indicate that this only affects Apache web servers.*

Action: Upgrade drupal/core to 9.3.19 or later.

composer require drupal/core:9.3.19

composer require drupal/core:9.4.3

Affected

Fixed versions

Sources

• osv: DRUPAL-CORE-2022-014
• https://www.drupal.org/sa-core-2022-014

CVE-2022-25277 · published 2022-07-20T15:40:05Z · modified 2026-09-19T18:17:25Z · JSON