CVE-2024-13293

Name of the Vulnerable Software and Affected Versions Drupal POST File versions 0.0.0 through 1.0.2

Description The issue is related to a Cross-Site Request Forgery (CSRF) vulnerability in the POST File module of the Drupal CMS system. This vulnerability can be exploited by a remote attacker to perform a CSRF attack, allowing for unauthorized actions on the affected system.

Recommendations For versions 0.0.0 through 1.0.2, update to a version later than 1.0.2 to resolve the issue. As a temporary workaround, consider restricting access to the POST File module until a patch is available. Avoid using the POST File module in sensitive operations until the issue is resolved.