17308 matches found
CVE-2024-13304 Minify JS - Moderately critical - Cross site request forgery - SA-CONTRIB-2024-070
Cross-Site Request Forgery CSRF vulnerability in Drupal Minify JS allows Cross Site Request Forgery.This issue affects Minify JS: from 0.0.0 before 3.0.3...
CVE-2024-13304 Minify JS - Moderately critical - Cross site request forgery - SA-CONTRIB-2024-070
Cross-Site Request Forgery CSRF vulnerability in Drupal Minify JS allows Cross Site Request Forgery.This issue affects Minify JS: from 0.0.0 before 3.0.3...
CVE-2024-13304 Minify JS - Moderately critical - Cross site request forgery - SA-CONTRIB-2024-070
Cross-Site Request Forgery CSRF vulnerability in Drupal Minify JS allows Cross Site Request Forgery.This issue affects Minify JS: from 0.0.0 before 3.0.3...
CVE-2024-13303 Download All Files - Critical - Access bypass - SA-CONTRIB-2024-069
Missing Authorization vulnerability in Drupal Download All Files allows Forceful Browsing.This issue affects Download All Files: from 0.0.0 before 2.0.2...
CVE-2024-13303 Download All Files - Critical - Access bypass - SA-CONTRIB-2024-069
Missing Authorization vulnerability in Drupal Download All Files allows Forceful Browsing.This issue affects Download All Files: from 0.0.0 before 2.0.2...
CVE-2024-13303
The Download All Files module for the Drupal CMS (versions prior to 2.0.2 ) is vulnerable to a Missing Authorization flaw. This vulnerability allows unauthenticated attackers to bypass security restrictions and perform a Forceful Browsing attack, potentially enabling them to download files they a...
CVE-2024-13303 Download All Files - Critical - Access bypass - SA-CONTRIB-2024-069
Missing Authorization vulnerability in Drupal Download All Files allows Forceful Browsing.This issue affects Download All Files: from 0.0.0 before 2.0.2...
CVE-2024-13302 Pages Restriction Access - Critical - Access bypass - SA-CONTRIB-2024-068
Incorrect Authorization vulnerability in Drupal Pages Restriction Access allows Forceful Browsing.This issue affects Pages Restriction Access: from 2.0.0 before 2.0.3...
CVE-2024-13302
The Pages Restriction Access module in the Drupal CMS (versions 2.0.0 through 2.0.3 ) is vulnerable to an Incorrect Authorization issue. The root cause is a deficiency in the authentication mechanism where the module fails to adequately protect certain types of URLs. This flaw allows unauthentica...
CVE-2024-13302 Pages Restriction Access - Critical - Access bypass - SA-CONTRIB-2024-068
Incorrect Authorization vulnerability in Drupal Pages Restriction Access allows Forceful Browsing.This issue affects Pages Restriction Access: from 2.0.0 before 2.0.3...
CVE-2024-13302 Pages Restriction Access - Critical - Access bypass - SA-CONTRIB-2024-068
Incorrect Authorization vulnerability in Drupal Pages Restriction Access allows Forceful Browsing.This issue affects Pages Restriction Access: from 2.0.0 before 2.0.3...
CVE-2024-13301 OAuth & OpenID Connect Single Sign On – SSO (OAuth/OIDC Client) - Critical - Cross Site Scripting - SA-CONTRIB-2024-067
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal OAuth & OpenID Connect Single Sign On – SSO OAuth/OIDC Client allows Cross-Site Scripting XSS.This issue affects OAuth & OpenID Connect Single Sign On – SSO OAuth/OIDC Client: from 3.0.0...
CVE-2024-13301
The Drupal OAuth & OpenID Connect Single Sign On – SSO (OAuth/OIDC Client) module is vulnerable to Cross-Site Scripting (XSS) due to insufficient escaping of query parameters sent to the callback URL when displaying error messages, specifically when the code parameter is missing in the response. ...
CVE-2024-13301 OAuth & OpenID Connect Single Sign On – SSO (OAuth/OIDC Client) - Critical - Cross Site Scripting - SA-CONTRIB-2024-067
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal OAuth & OpenID Connect Single Sign On – SSO OAuth/OIDC Client allows Cross-Site Scripting XSS.This issue affects OAuth & OpenID Connect Single Sign On – SSO OAuth/OIDC Client: from 3.0.0...
CVE-2024-13301 OAuth & OpenID Connect Single Sign On – SSO (OAuth/OIDC Client) - Critical - Cross Site Scripting - SA-CONTRIB-2024-067
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal OAuth & OpenID Connect Single Sign On – SSO OAuth/OIDC Client allows Cross-Site Scripting XSS.This issue affects OAuth & OpenID Connect Single Sign On – SSO OAuth/OIDC Client: from 3.0.0...
CVE-2024-13300
The Print Anything module in the Drupal CMS is vulnerable to arbitrary code execution due to insufficient input validation . This flaw affects all versions of the module and can be exploited by a remote attacker. While the documents recommend updating to a version that includes a fix, they state ...
CVE-2024-13300 Print Anything - Critical - Unsupported - SA-CONTRIB-2024-066
Vulnerability in Drupal Print Anything.This issue affects Print Anything:...
CVE-2024-13300 Print Anything - Critical - Unsupported - SA-CONTRIB-2024-066
Vulnerability in Drupal Print Anything.This issue affects Print Anything:...