CVE-2024-13269
This module enables you to cache pages for logged in users at the Varnish level. The Varnish bin names may be guessable when no hashing noise configu...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
This module enables you to cache pages for logged in users at the Varnish level.
The Varnish bin names may be guessable when no hashing noise configuration is set on the module configuration page, which would ultimately allow any user to view cached pages that were intended for other roles when guessing such a bin name.
影響パッケージ
Packagist:https://packages.drupal.org/8
drupal/adv_varnish
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.11"}],"database_specific":{"constraint":"<4.0.11"}}]
参照URL
- web drupal.org