DRUPAL-CONTRIB-2023-021
DRUPAL-CONTRIB-2023-021
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
CivicCookieControl is a module that can help make a website compliant with EU and UK cookie legislation. The Civic GovUK Cookie Control module does not sufficiently sanitize the configuration resulting in a Cross-Site Scripting (XSS) vulnerability. This vulnerability is mitigated by the fact that the attacker must have a role with the "Administer Civic Cookie Control" permission.
Corrección disponible
- Publicación
- Actualización
Pila tecnológica: php
Productos y versiones afectados
drupal/civicccookiecontrol Packagist:https://packages.drupal.org/8
- Intervalos de versiones afectados
- ECOSYSTEM: < 4.4.13
Actualiza a 4.4.13