-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| drupal/core | composer | >= 8.0.0, < 9.2.18 | 9.2.18 |
| drupal/core | composer | >= 9.3.0, < 9.3.12 | 9.3.12 |
Miggo AIRoot Cause AnalysisThe provided vulnerability information describes an improper input validation issue in Drupal core's form API affecting custom/contributed modules, but does not explicitly name vulnerable core functions. The advisory references Drupal's form API generally rather than specific functions, and critical details like GitHub patch information or commit diffs are unavailable. Without concrete code changes or explicit documentation of affected functions from Drupal's security advisory (SA-CORE-2022-008), we cannot identify specific vulnerable functions in core with high confidence. The vulnerability manifests when modules implement forms in specific ways, but the root cause in core's API isn't traceable to individual functions without further technical details.
PHPPHP