Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Drupal Incorrect Authorization Vulnerability - CVE-2022-25274 - Vulnerability Database
Drupal

Drupal Incorrect Authorization Vulnerability - CVE-2022-25274

Medium
Reference: CVE-2022-25274
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2022-25274
Title: Drupal Incorrect Authorization Vulnerability
Overview:

Drupal 9.3 implemented a generic entity access API for entity revisions. However this API was not completely integrated with existing permissions resulting in some possible access bypass for users who have access to use revisions of content generally but who do not have access to individual items of node and media content. This vulnerability only affects sites using Drupal39s revision system.