PT-2024-10357
CVE-2024-13260
·
تاريخ النشر
2024-05-29
·
تاريخ التحديث
2025-01-10
الوصف من
CVSS 2.0
10
عاليةالمقاييسAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Migrate queue importer versions 0.0.0 through 2.1.1
Description
The issue is related to a Cross-Site Request Forgery (CSRF) vulnerability in the Migrate queue importer module of the Drupal content management system. This vulnerability allows for Cross-Site Request Forgery attacks.
Recommendations
For versions 0.0.0 through 2.1.1, update to a version later than 2.1.1 to resolve the issue.
As a temporary workaround, consider restricting access to the Migrate queue importer module until a patch is available.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾