CVE-2022-25278

score

<0.1

cvss

6.5

epss

0.6%

published

2023-04-26

kev added

—

first seen

2026-10-21

Drupal core form API contains an access control issue caused by incorrect evaluation of form element access, letting users modify data they should not have access to, exploit requires specific form configurations in contributed or custom modules.