CVE-2024-13259
Image Sizes - Moderately critical - Access bypass - SA-CONTRIB-2024-023
Résumé
Image Sizes - Moderately critical - Access bypass - SA-CONTRIB-2024-023
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Insertion of Sensitive Information Into Sent Data vulnerability in Drupal Image Sizes allows Forceful Browsing.This issue affects Image Sizes: from 0.0.0 before 3.0.2.
Paquets affectés
Packagist:https://packages.drupal.org/8
drupal/image_sizes
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.2"}],"database_specific":{"constraint":"<3.0.2"}}]
Références
- advisory github.com
- advisory nvd.nist.gov
- web drupal.org
- web git.drupalcode.org
- web drupal.org