EDB-52266
webappsphp
Drupal 11.x-dev - Full Path Disclosure
CVE-2024-45440
Milad karimi4/19/2025
CVE-2024-45440
5.3MEDIUMcore/authorize.php in Drupal 11.x-dev allows Full Path Disclosure (even when error logging is None) if the value of hash_salt is file_get_contents of a file that does not exist.
Publicado: 8/29/2024Actualizado: 4/21/2025
Descripción
core/authorize.php in Drupal 11.x-dev allows Full Path Disclosure (even when error logging is None) if the value of hash_salt is file_get_contents of a file that does not exist.
Análisis IAImpulsado por IA
Productos Afectados
drupaldrupal
2023-05-09