CVE-2024-13259
CVE-2024-13259 · Image Sizes - Moderately critical - Access bypass - SA-CONTRIB-2024-023
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Insertion of Sensitive Information Into Sent Data vulnerability in Drupal Image Sizes allows Forceful Browsing.This issue affects Image Sizes: from 0.0.0 before 3.0.2.
CVSS 7.5 · High · EPSS 0.5% · Fix available
- Published
- Updated
Stack: php
Affected products and versions
image sizes
- Versions
- ≥ 0.0.0, < 3.0.2: Affected (semver)
Update to 3.0.2
drupal/image_sizes Packagist:https://packages.drupal.org/8
- Affected ranges
- ECOSYSTEM: < 3.0.2
Update to 3.0.2