CVE-2024-13259

Description

Insertion of Sensitive Information Into Sent Data vulnerability in Drupal Image Sizes allows Forceful Browsing.This issue affects Image Sizes: from 0.0.0 before 3.0.2.

Reserved 2025-01-09 | Published 2025-01-09 | Updated 2025-01-10 | Assigner drupal

Problem types

CWE-201 Insertion of Sensitive Information Into Sent Data

Product status

Default status
unaffected

0.0.0 before 3.0.2
affected

Credits

Dezső Biczó finder

Dezső Biczó remediation developer

Pascal Crott remediation developer

Juraj Nemec remediation developer

Juraj Nemec coordinator

Neil Drumm coordinator

Michael Hess coordinator

References

www.drupal.org/sa-contrib-2024-023

cve.org (CVE-2024-13259)

nvd.nist.gov (CVE-2024-13259)

Download JSON