Awaiting Analysis
CVE has been recently published to the CVE List and has been received by the NVD.

Products

Drupal

11.x-dev

Source

cve@mitre.org

CVE-2024-45440 details

Published : Aug. 29, 2024, 11:15 a.m.
Last Modified : Aug. 29, 2024, 1:25 p.m.

Description

core/authorize.php in Drupal 11.x-dev allows Full Path Disclosure (even when error logging is None) if the value of hash_salt is file_get_contents of a file that does not exist.

CVSS Score

1	2	3	4	5	6	7	8	9	10

Weakness

Weakness	Name	Description

References

URL	Source
https://www.drupal.org/project/drupal/issues/3457781	cve@mitre.org

This website uses the NVD API, but is not approved or certified by it.

CVE-2024-45440