Skip to content
OpenAdvisories
Medium · 4.5 CVE-2024-13304 DRUPAL-CONTRIB-2024-070EUVD-2024-51517GHSA-6hq6-3pp3-9598

Minify JS - Moderately critical - Cross site request forgery - SA-CONTRIB-2024-070

Published Jan 9, 2025 · Updated Jan 10, 2025 · Assigned by drupal

Description

Cross-Site Request Forgery (CSRF) vulnerability in Drupal Minify JS allows Cross Site Request Forgery.This issue affects Minify JS: from 0.0.0 before 3.0.3.

Affected products

VendorProductAffectedFixed
Drupal Minify JS 0.0.0 – < 3.0.3 3.0.3

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/minifyjs < 3.0.3 3.0.3 DRUPAL-CONTRIB-2024-070

References