## Drupal core - Critical - Multiple vulnerabilities - SA-CORE-2022-016

- 種別: advisory
- 重大度: critical
- 関連技術: drupal, php
- CVE: CVE-2022-39261
- 公開日時: 2022-09-28T16:24:08.000Z
- 情報源: Drupal Security Advisories (https://www.drupal.org/sa-core-2022-016)
- パーマリンク: https://vulnpulse.app/items/drupal-security-3e90a9fe9fc3

Project: Drupal core Project machine name: drupal Date: 2022-September-28 Security risk: Critical 18 ∕ 25 AC:Basic/A:Admin/CI:All/II:All/E:Proof/TD:All Vulnerability: Multiple vulnerabilities Affected versions: >= 8.0.0 <9.3.22 || >= 9.4.0 <9.4.7 CVE IDs: CVE-2022-39261 Description: Drupal uses the Twig third-party library for content templating and sanitization. Twig has released a security update that affects Drupal. Twig has rated the vulnerability as high severity. Drupal core's code extending Twig has also been updated to mitigate a related vulnerability. Multiple vulnerabilities are pos…