CVE-2024-13292

This module enables you to add any HTML content you want in a tooltip displayed on mouse hover. The module does not sufficiently escape the markup in...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

This module enables you to add any HTML content you want in a tooltip displayed on mouse hover.

The module does not sufficiently escape the markup inserted in the tooltip block.

This vulnerability is mitigated by the fact that an attacker must have a role with the permission "administer blocks".

出典: OSV.dev (Open Source Vulnerabilities) NVD OSV

Packagist:https://packages.drupal.org/8 drupal/tooltip

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.2"}],"database_specific":{"constraint":"<1.1.2"}}]