Project:
Vulnerability:
Information disclosure
CVE IDs:
CVE-2022-25270
Description:
The Quick Edit module does not properly check entity access in some circumstances. This could result in users with the "access in-place editing" permission viewing some content they are are not authorized to access.
Sites are only affected if the QuickEdit module (which comes with the Standard profile) is installed.
Also see .
Solution:
Install the latest version:
- If you are using Drupal 9.3, update to .
All versions of Drupal 9 prior to 9.2.x are end-of-life and do not receive security coverage. Note that .
Reported By:
- of the Drupal Security Team
- of the Drupal Security Team
- , provisional member of the Drupal Security Team
- Joseph Zhao, provisional member of the Drupal Security Team
Vollständiger Original-Bericht
Ausführliche Details, Code-Beispiele & Hersteller-Stellungnahme auf drupal.org.
SOCIAL SHARE CARD GENERATOR