CVE-2024-13293

creationtimestamp| type| source ---|---|--- 2025-01-09 21:15:58+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdly27h7u2x...

CVE-2024-13293

Cross-Site Request Forgery CSRF vulnerability in Drupal POST File allows Cross Site Request Forgery.This issue affects POST File: from 0.0.0 before 1.0.2...

CVE-2024-13293 POST File - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2024-059

Cross-Site Request Forgery CSRF vulnerability in Drupal POST File allows Cross Site Request Forgery.This issue affects POST File: from 0.0.0 before 1.0.2...

CVE-2024-13293

CVE-2024-13293 is a CSRF vulnerability in the Drupal POST File module affecting versions 0.0.0 through 1.0.2. The issue enables unauthenticated CSRF attacks by abusing a POST /postfile/upload endpoint to trick users into performing unintended actions. Related disclosures cite SA-CONTRIB-2024-059 ...

CVE-2024-13293 POST File - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2024-059

Cross-Site Request Forgery CSRF vulnerability in Drupal POST File allows Cross Site Request Forgery.This issue affects POST File: from 0.0.0 before 1.0.2...