WID-SEC-W-2024-0196

DeutschShown in its original language — a full translation is planned for a future version.

Drupal: Mehrere Schwachstellen

view advisory published 2024-01-24

Ein anonymer Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um Sicherheitsmaßnahmen zu umgehen oder vertrauliche Informationen offenzulegen.

describes (4)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2024-13242US	—	0.38% (32nd)	—	2025-01-09
Exposed Dangerous Method or Function vulnerability in Drupal Swift Mailer allows Resource Location Spoofing.This issue affects Swift Mailer: ..
CVE-2024-13241US	—	0.36% (29th)	—	2025-01-09
Improper Authorization vulnerability in Drupal Open Social allows Collect Data from Common Resource Locations.This issue affects Open Social: from 0.0.0 before 12.0.5.
CVE-2024-13240US	—	0.38% (32nd)	—	2025-01-09
Improper Access Control vulnerability in Drupal Open Social allows Collect Data from Common Resource Locations.This issue affects Open Social: from 0.0.0 before 12.05.
CVE-2024-13239US	—	0.58% (47th)	—	2025-01-09
Weak Authentication vulnerability in Drupal Two-factor Authentication (TFA) allows Authentication Abuse.This issue affects Two-factor Authentication (TFA): from 0.0.0 before 1.5.0.

references

External citations — patches, advisories, analysis.

WID-SEC-W-2024-0196 - CSAF Versionself
WID-SEC-2024-0196 - Portal Versionself
Drupal Security Advisory vom 2024-01-24external
Drupal Security Advisory vom 2024-01-24external
Drupal Security Advisory vom 2024-01-24external
Drupal Security Advisory vom 2024-01-24external

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan