Public CVE-2022-25274 disclosure

In some situations, the Image module does not correctly check access to image files not stored in the standard public files directory when generating derivative images using the image styles...