Lucene search

K
drupalDrupal Security TeamDRUPAL-SA-CONTRIB-2024-023
HistoryMay 29, 2024 - 12:00 a.m.

Image Sizes - Moderately critical - Access bypass - SA-CONTRIB-2024-023

2024-05-2900:00:00
Drupal Security Team
www.drupal.org
7
module
responsive image styles
access bypass
vulnerability

AI Score

7.3

Confidence

Low

This module enables you to create responsive image styles that depend on the parent element’s width. The module doesn’t sufficiently check access to rendered images, resulting in access bypass vulnerabilities in specific scenarios.

Affected configurations

Vulners
Node
drupalheader_imageRange<3.0.2
VendorProductVersionCPE
drupalheader_image*cpe:2.3:a:drupal:header_image:*:*:*:*:*:*:*:*

AI Score

7.3

Confidence

Low