w0r1i0g1ht/CVE-2024-45440

PoC

Drupal CVE-2024-45440

view exploit source poc_in_githubauthor w0r1i0g1htpublished 2024-12-26catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2024-45440US	medium5.3	9.27% (95th)	Exploit	2024-08-29
core/authorize.php in Drupal 11.x-dev allows Full Path Disclosure (even when error logging is None) if the value of hash_salt is file_get_contents of a file that does not exist.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.