Skip to content
OpenAdvisories
Low · 3.1 CVE-2024-13293 DRUPAL-CONTRIB-2024-059EUVD-2024-51506GHSA-p77c-g2ff-r9hf

POST File - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2024-059

Published Jan 9, 2025 · Updated Jan 10, 2025 · Assigned by drupal

Description

Cross-Site Request Forgery (CSRF) vulnerability in Drupal POST File allows Cross Site Request Forgery.This issue affects POST File: from 0.0.0 before 1.0.2.

Affected products

VendorProductAffectedFixed
Drupal POST File 0.0.0 – < 1.0.2 1.0.2

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/postfile < 1.0.2 1.0.2 DRUPAL-CONTRIB-2024-059

References