Improper Input Validation in Drupal Core's Form API Affecting User Data Security

CVE-2022-25271

What is CVE-2022-25271?

Drupal core's Form API is susceptible to a vulnerability where certain contributed or custom module forms may not properly validate inputs. This flaw could permit attackers to inject unauthorized values or alter existing data. Although the affected forms are not prevalent, in specific scenarios, this vulnerability could allow manipulation of critical or sensitive information, posing significant risks to data integrity and security.

References