DRUPAL-CONTRIB-2023-031
DRUPAL-CONTRIB-2023-031
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The module doesn’t sufficiently protect against malicious links, which means an attacker can trick an administrator into performing unwanted actions. This vulnerability is mitigated by the fact that the set of unwanted actions is limited to specific configurations.
Fix available
- Published
- Updated
Stack: php
Affected products and versions
drupal/symfony_mailer Packagist:https://packages.drupal.org/8
- Affected ranges
- ECOSYSTEM: < 1.2.2
- ECOSYSTEM: ≥ 1.3.0-beta1, < 1.3.0-rc3
Update to 1.2.2; Update to 1.3.0-rc3