{"action":"Upgrade drupal/core to 7.91 or later.","affected":[{"fixed":"7.91","introduced":"7.0.0"},{"fixed":"9.3.19","introduced":"8.0.0"},{"fixed":"9.4.3","introduced":"9.4.0"}],"component":"drupal/core","cve_ids":["CVE-2022-25275"],"ecosystem":"Packagist","epss":0.00667,"exploited":false,"fixed_versions":["7.91","9.3.19","9.4.3"],"ghsa_id":"GHSA-xh3v-6f9j-wxw3","id":"tcs_01M5KFB1ZKEX1HS7NESERWZY3K","modified_at":"2025-12-10T23:41:01.087151Z","published_at":"2022-08-06T05:31:26Z","references":["https://osv.dev/vulnerability/GHSA-xh3v-6f9j-wxw3","https://nvd.nist.gov/vuln/detail/CVE-2022-25275","https://github.com/drupal/core/commit/2d5f47fc8a166115f56c2330a81e83abe22445cf","https://github.com/drupal/core/commit/e2fbf63700819cb470a1be425798f1a3f2020116","https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/core/CVE-2022-25275.yaml","https://github.com/drupal/core","https://www.drupal.org/sa-core-2022-012"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-xh3v-6f9j-wxw3","url":"https://osv.dev/vulnerability/GHSA-xh3v-6f9j-wxw3"}],"summary":"Drupal core Information Disclosure vulnerability"}