Lucene search

K
drupalDrupal Security TeamDRUPAL-SA-CONTRIB-2024-014
HistoryFeb 28, 2024 - 12:00 a.m.

Drupal Symfony Mailer Lite - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2024-014

2024-02-2800:00:00
Drupal Security Team
www.drupal.org
5
drupal
symfony
mailer lite
cross site request forgery
sa-contrib-2024-014
security
administrator
configuration

7 High

AI Score

Confidence

Low

The module doesn’t sufficiently protect against malicious links, which means an attacker can trick an administrator into performing unwanted actions. This vulnerability is mitigated by the fact that the set of unwanted actions is limited to specific configurations.

Affected configurations

Vulners
Node
drupalsymfony_mailer_liteRange<1.0.6
CPENameOperatorVersion
symfony mailer litelt1.0.6

7 High

AI Score

Confidence

Low