CVE-2022-25275

score

<0.1

cvss

7.5

epss

0.7%

published

2023-04-26

kev added

—

first seen

2026-10-21

Drupal's Image module in affected versions does not correctly check access to non-public image files stored outside the standard public directory when generating derivatives, letting unauthorized access if certain configurations are enabled, exploit requires specific configuration settings.