EDB-52266
webappsphp
Drupal 11.x-dev - Full Path Disclosure
CVE-2024-45440
Milad karimi4/19/2025
CVE-2024-45440
5.3MEDIUMcore/authorize.php in Drupal 11.x-dev allows Full Path Disclosure (even when error logging is None) if the value of hash_salt is file_get_contents of a file that does not exist.
Veröffentlicht: 8/29/2024Aktualisiert: 4/21/2025
Beschreibung
core/authorize.php in Drupal 11.x-dev allows Full Path Disclosure (even when error logging is None) if the value of hash_salt is file_get_contents of a file that does not exist.
KI-AnalyseKI-gestützt
Betroffene Produkte
drupaldrupal
2023-05-09