CVE-2024-13243

The Entity Delete Log module tracks the deletion of configured entity types, such as node or comments. It does not add sufficient permission to the l...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

The Entity Delete Log module tracks the deletion of configured entity types, such as node or comments.

It does not add sufficient permission to the log report page, allowing an attacker to view information from deleted entities.

出典: OSV.dev (Open Source Vulnerabilities) NVD OSV

Packagist:https://packages.drupal.org/8 drupal/entity_delete_log

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1"}],"database_specific":{"constraint":"<1.1.1"}}]