We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Assigner | drupal |
Reserved | 2024-08-29 |
Published | 2024-08-29 |
Updated | 2024-10-28 |
core/authorize.php in Drupal 11.x-dev allows Full Path Disclosure (even when error logging is None) if the value of hash_salt is file_get_contents of a file that does not exist.
https://www.drupal.org/project/drupal/issues/3457781
https://senscybersecurity.nl/CVE-2024-45440-Explained/