Search for packages
Package details: pkg:composer/drupal/drupal@10.3.0-beta1
purl pkg:composer/drupal/drupal@10.3.0-beta1
Next non-vulnerable version 10.3.9
Latest non-vulnerable version 11.0.8
Risk 10.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-y3g8-ayqw-5fer
Aliases:
CVE-2024-45440
GHSA-mg8j-w93w-xjgc
core/authorize.php in Drupal 11.x-dev allows Full Path Disclosure (even when error logging is None) if the value of hash_salt is file_get_contents of a file that does not exist.
10.3.6
Affected by 5 other vulnerabilities.
11.0.0-alpha1
Affected by 2 other vulnerabilities.
11.0.5
Affected by 4 other vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-y3g8-ayqw-5fer core/authorize.php in Drupal 11.x-dev allows Full Path Disclosure (even when error logging is None) if the value of hash_salt is file_get_contents of a file that does not exist. CVE-2024-45440
GHSA-mg8j-w93w-xjgc

Date Actor Action Vulnerability Source VulnerableCode Version
2025-06-20T17:07:08.747986+00:00 GitLab Importer Affected by VCID-y3g8-ayqw-5fer https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/drupal/drupal/CVE-2024-45440.yml 36.1.3
2025-06-20T17:07:04.401785+00:00 GitLab Importer Fixing VCID-y3g8-ayqw-5fer https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/drupal/drupal/CVE-2024-45440.yml 36.1.3
2025-06-03T23:43:15.308397+00:00 GitLab Importer Affected by VCID-y3g8-ayqw-5fer https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/drupal/drupal/CVE-2024-45440.yml 36.1.0
2025-06-03T23:43:11.614497+00:00 GitLab Importer Fixing VCID-y3g8-ayqw-5fer https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/drupal/drupal/CVE-2024-45440.yml 36.1.0
2025-06-02T23:41:34.213545+00:00 GitLab Importer Affected by VCID-y3g8-ayqw-5fer https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/drupal/drupal/CVE-2024-45440.yml 36.1.2
2025-06-02T23:41:30.000996+00:00 GitLab Importer Fixing VCID-y3g8-ayqw-5fer https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/drupal/drupal/CVE-2024-45440.yml 36.1.2
2025-04-03T22:22:02.739394+00:00 GitLab Importer Affected by VCID-y3g8-ayqw-5fer https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/drupal/drupal/CVE-2024-45440.yml 36.0.0
2025-04-03T22:21:54.278724+00:00 GitLab Importer Fixing VCID-y3g8-ayqw-5fer https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/drupal/drupal/CVE-2024-45440.yml 36.0.0
2025-02-18T04:08:17.416707+00:00 GitLab Importer Affected by VCID-y3g8-ayqw-5fer https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/drupal/drupal/CVE-2024-45440.yml 35.1.0
2025-02-18T04:08:15.587351+00:00 GitLab Importer Fixing VCID-y3g8-ayqw-5fer https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/drupal/drupal/CVE-2024-45440.yml 35.1.0
2024-11-21T01:15:43.660151+00:00 GitLab Importer Affected by VCID-y3g8-ayqw-5fer https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/drupal/drupal/CVE-2024-45440.yml 35.0.0
2024-11-21T01:15:41.885730+00:00 GitLab Importer Fixing VCID-y3g8-ayqw-5fer https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/drupal/drupal/CVE-2024-45440.yml 35.0.0
2024-11-19T01:03:40.109633+00:00 GitLab Importer Affected by VCID-y3g8-ayqw-5fer https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/drupal/drupal/CVE-2024-45440.yml 34.3.2
2024-11-19T01:03:38.357236+00:00 GitLab Importer Fixing VCID-y3g8-ayqw-5fer https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/drupal/drupal/CVE-2024-45440.yml 34.3.2
2024-10-17T05:19:59.531405+00:00 GitLab Importer Fixing VCID-y3g8-ayqw-5fer https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/drupal/drupal/CVE-2024-45440.yml 34.0.2
2024-10-17T02:06:18.628856+00:00 GHSA Importer Fixing VCID-y3g8-ayqw-5fer https://github.com/advisories/GHSA-mg8j-w93w-xjgc 34.0.2
2024-10-08T01:41:11.593403+00:00 GitLab Importer Affected by VCID-y3g8-ayqw-5fer https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/drupal/drupal/CVE-2024-45440.yml 34.0.2
2024-10-07T22:21:46.352572+00:00 GHSA Importer Affected by VCID-y3g8-ayqw-5fer https://github.com/advisories/GHSA-mg8j-w93w-xjgc 34.0.2
2024-09-29T10:14:31.748539+00:00 GitLab Importer Affected by VCID-y3g8-ayqw-5fer https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/drupal/drupal/CVE-2024-45440.yml 34.0.1
2024-09-29T07:08:14.410886+00:00 GHSA Importer Affected by VCID-y3g8-ayqw-5fer https://github.com/advisories/GHSA-mg8j-w93w-xjgc 34.0.1