CVE-2024-13250

The module doesn’t sufficiently protect against malicious links, which means an attacker can trick an administrator into performing unwanted actions....

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

The module doesn’t sufficiently protect against malicious links, which means an attacker can trick an administrator into performing unwanted actions.

This vulnerability is mitigated by the fact that the set of unwanted actions is limited to specific configurations.

出典: OSV.dev (Open Source Vulnerabilities) NVD OSV

Packagist:https://packages.drupal.org/8 drupal/symfony_mailer_lite

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.6"}],"database_specific":{"constraint":"<1.0.6"}}]