Early access: the directory is still filling out, and every rating here is a reported experience.

Security releases

Drupal

Drupal core - Critical - Arbitrary PHP code execution - SA-CORE-2022-014

SA-CORE-2022-014 Jul 20, 2022 Source: Vendor

Imported by the Drupal advisory catcher from https://www.drupal.org/sa-core-2022-014. 1 reporter(s), 8 fixer(s). Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://www.drupal.org/sa-core-2022-014
Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

9 lines
Showing 1–9 of 9
CVE-2022-25277 BR2022-0000-012045 unclaimed
Drupal core - Critical - Arbitrary PHP code execution - SA-CORE-2022-014
Credited as Elar Lang
CVE-2022-25277 BR2022-0000-012046 unclaimed
Drupal core - Critical - Arbitrary PHP code execution - SA-CORE-2022-014
Credited as Peter Wolanin of the Drupal Security Team
CVE-2022-25277 BR2022-0000-012047 unclaimed
Drupal core - Critical - Arbitrary PHP code execution - SA-CORE-2022-014
Credited as xjm of the Drupal Security Team
CVE-2022-25277 BR2022-0000-012048 unclaimed
Drupal core - Critical - Arbitrary PHP code execution - SA-CORE-2022-014
Credited as Drew Webber of the Drupal Security Team
CVE-2022-25277 BR2022-0000-012049 unclaimed
Drupal core - Critical - Arbitrary PHP code execution - SA-CORE-2022-014
Credited as Alex Bronstein of the Drupal Security Team
CVE-2022-25277 BR2022-0000-012050 unclaimed
Drupal core - Critical - Arbitrary PHP code execution - SA-CORE-2022-014
Credited as Greg Knaddison of the Drupal Security Team
CVE-2022-25277 BR2022-0000-012051 unclaimed
Drupal core - Critical - Arbitrary PHP code execution - SA-CORE-2022-014
Credited as Jen Lampton, provisional member of the Drupal Security Team
CVE-2022-25277 BR2022-0000-012052 unclaimed
Drupal core - Critical - Arbitrary PHP code execution - SA-CORE-2022-014
Credited as Lee Rowlands of the Drupal Security Team
CVE-2022-25277 BR2022-0000-012053 unclaimed
Drupal core - Critical - Arbitrary PHP code execution - SA-CORE-2022-014
Credited as Dave Long, provisional member of the Drupal Security Team