The Quick Edit module does not properly check entity access in some circumstances. This could result in users with the "access in-place editing" permission viewing some content they are are not authorized to access. Sites are only affected if the QuickEdit module (which comes with the Standard profile) is installed.
References
Link | Resource |
---|---|
https://www.drupal.org/sa-core-2022-004 | Patch Vendor Advisory |
https://www.drupal.org/sa-core-2022-004 | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 06:51
Type | Values Removed | Values Added |
---|---|---|
References | () https://www.drupal.org/sa-core-2022-004 - Patch, Vendor Advisory |
Information
Published : 2022-02-17 00:15
Updated : 2024-11-21 06:51
NVD link : CVE-2022-25270
Mitre link : CVE-2022-25270
CVE.ORG link : CVE-2022-25270
JSON object : View
Products Affected
drupal
- drupal
CWE
CWE-863
Incorrect Authorization