CVE-2024-45440

CVE-2024-45440 Drupal CVE-2024-45440 core/authorize.php in Drupal 11.x-dev allows Full Path Disclosure even when error logging is None if the value of hashsalt is filegetcontents of a file that does not exist. 使用 root@kitploit: python CVE-2024-45440.py 靶场部署 settings.php将通过挂载的方式替换掉容器中的settings.php...