EDB-52266
webappsphp
Drupal 11.x-dev - Full Path Disclosure
CVE-2024-45440
Milad karimi4/19/2025
CVE-2024-45440
5.3MEDIUMcore/authorize.php in Drupal 11.x-dev allows Full Path Disclosure (even when error logging is None) if the value of hash_salt is file_get_contents of a file that does not exist.
Publicado: 8/29/2024Atualizado: 4/21/2025
Descrição
core/authorize.php in Drupal 11.x-dev allows Full Path Disclosure (even when error logging is None) if the value of hash_salt is file_get_contents of a file that does not exist.
Análise IADesenvolvido por IA
Produtos Afetados
drupaldrupal
2023-05-09