Packagist/drupal/core CVE-2022-25274: medium 5.4, EPSS 0.42%

Access bypass in Drupal core

Action: Upgrade drupal/core to 9.3.12 or later.

composer require drupal/core:9.3.12

Affected

Fixed versions

Sources

• osv: GHSA-7jr4-hgqx-vwgq
• https://nvd.nist.gov/vuln/detail/CVE-2022-25274
• https://github.com/drupal/core
• https://www.drupal.org/sa-core-2022-009

CVE-2022-25274 · published 2023-04-26T15:30:21Z · modified 2025-12-10T23:41:19.234954Z · JSON