VULNERABILITY INTELLIGENCE

CVE-2022-25270

CVSS score6.5 MEDIUM
EPSS probability0.77%
CISA KEVNot currently listed
Published2022-02-17
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

The Quick Edit module does not properly check entity access in some circumstances. This could result in users with the "access in-place editing" permission viewing some content they are are not authorized to access. Sites are only affected if the QuickEdit module (which comes with the Standard profile) is installed.

Weakness classification

  • nvd@nist.gov: CWE-863

Primary references