## Drupal core - Moderately critical - Information Disclosure - SA-CORE-2022-012

- 種別: advisory
- 重大度: critical
- 関連技術: drupal, php
- CVE: CVE-2022-25275
- 公開日時: 2022-07-20T15:34:05.000Z
- 情報源: Drupal Security Advisories (https://www.drupal.org/sa-core-2022-012)
- パーマリンク: https://vulnpulse.app/items/drupal-security-1ee6ba214b76

Project: Drupal core Project machine name: drupal Date: 2022-July-20 Security risk: Moderately critical 13 ∕ 25 AC:None/A:None/CI:Some/II:None/E:Theoretical/TD:Uncommon Vulnerability: Information Disclosure Affected versions: >=7.0 <7.91 || >= 8.0.0 <9.3.19 || >= 9.4.0 <9.4.3 CVE IDs: CVE-2022-25275 Description: In some situations, the Image module does not correctly check access to image files not stored in the standard public files directory when generating derivative images using the image styles system. Access to a non-public file is checked only if it is stored in the "private" file syst…