PT-2024-10089

CVE-2024-13242

Published

2024-01-24

Updated

2025-01-10

Description by

CVSS 2.0

9.4

Critical

MetricsAV:N/AC:L/Au:N/C:C/I:C/A:N

Name of the Vulnerable Software and Affected Versions Drupal Swift Mailer versions .

Description The issue is related to an Exposed Dangerous Method or Function vulnerability in Drupal Swift Mailer, which allows Resource Location Spoofing. This can be exploited by a remote attacker to perform spoofing attacks.

Recommendations For Drupal Swift Mailer versions .: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Researchers

Vendors

Affected products

Weakness enumeration

CWE-749: Exposed Dangerous Method or Function

Related identifiers

CVE-2024-13242

BDU:2025-00263