Drupal Core 9.2.x Security Bypass (9.2.0 - 9.2.17) - Vulnerabilities

Description

Drupal Core is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to inject disallowed values into forms or overwrite data. Drupal Core versions 9.2.x ranging from 9.2.0 and up to and including 9.2.17 are vulnerable.

Remediation

Update to Drupal Core version 9.2.18 or latest

References

https://www.drupal.org/sa-core-2022-008

Related Vulnerabilities

WordPress 4.7.x Multiple Vulnerabilities (4.7 - 4.7.27)

WordPress Plugin 10Web Map Builder for Google Maps Cross-Site Scripting (1.0.69)

Ruby on Rails Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2017-17920)

WordPress Plugin ARMember-Content Restriction & Membership Security Bypass (1.4)

XWikiplatform Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) Vulnerability (CVE-2026-40105)

Severity

High

Classification

CVE-2022-25273 CWE-20 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

Drupal Core 9.2.x Security Bypass (9.2.0 - 9.2.17)