CVE-2022-25270

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-25270
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-25270.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-25270
Aliases
Downstream
Published
2022-02-16T23:15:11Z
Modified
2026-07-15T01:48:53.356338214Z
Summary
[none]
Details

The Quick Edit module does not properly check entity access in some circumstances. This could result in users with the "access in-place editing" permission viewing some content they are are not authorized to access. Sites are only affected if the QuickEdit module (which comes with the Standard profile) is installed.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/25xxx/CVE-2022-25270.json",
    "cna_assigner": "drupal",
    "unresolved_ranges": [
        {
            "source": "AFFECTED_FIELD",
            "extracted_events": [
                {
                    "introduced": "9.3.x"
                },
                {
                    "fixed": "9.3.6"
                },
                {
                    "introduced": "9.2.x"
                },
                {
                    "fixed": "9.2.13"
                }
            ]
        }
    ]
}
References

Affected packages

Git / github.com/drupal/drupal

Affected ranges

Type
GIT
Repo
https://github.com/drupal/drupal
Events
Introduced
943ecef3c0bc9822338252a7df6419aeb9253c9d
Fixed
7c620f0d179eee168b27509f3902f99e9fa52703
Introduced
698ee686c23de8c97d7e0601cf745b220d54f4e1
Fixed
e205f31c36c6db950f50d473cfd24ad22ac98ae1
Database specific 
{
    "source": "CPE_RANGE",
    "extracted_events": [
        {
            "introduced": "9.2.0"
        },
        {
            "fixed": "9.2.13"
        },
        {
            "introduced": "9.3.0"
        },
        {
            "fixed": "9.3.6"
        }
    ],
    "cpe": "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*"
}

Affected versions

9.*
9.2.0
9.2.1
9.2.10
9.2.11
9.2.12
9.2.3
9.2.5
9.2.7
9.2.8
9.3.0
9.3.2
9.3.4
9.3.5

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-25270.json"