Drupal Core 9.4.x Security Bypass (9.4.0 - 9.4.2)
Description
Drupal Core is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to access non-public files. Drupal Core versions 9.4.x ranging from 9.4.0 and up to and including 9.4.2 are vulnerable.
Remediation
Update to Drupal Core version 9.4.3 or latest