EDB-52266

PoC

Drupal 11.x-dev - Full Path Disclosure

view exploit source exploit_dbtype webappsauthor Milad karimipublished 2025-04-19catalog exploit_db

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2024-45440US	medium5.3	9.27% (95th)	Exploit	2024-08-29
core/authorize.php in Drupal 11.x-dev allows Full Path Disclosure (even when error logging is None) if the value of hash_salt is file_get_contents of a file that does not exist.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.