CVE-2024-11942
2 advisories.
Packagist/drupal/core CVE-2024-11942: unknown
Under certain uncommon site configurations, a bug in the CKEditor 5 module can cause some image uploads to move the entire webroot to a different location on the file system. This could be exploited b
Action: Upgrade drupal/core to 10.2.10 or later.
composer require drupal/core:10.2.10Affected
| introduced | fixed | last affected |
|---|---|---|
| 10.0.0 | 10.2.10 | - |
Fixed versions
| 10.2.10 |
Sources
CVE-2024-11942 · published · modified · JSON
Packagist/drupal/core CVE-2024-11942: medium 5.9
Drupal core vulnerable to improper error handling
Action: Upgrade drupal/core to 10.2.10 or later.
composer require drupal/core:10.2.10Affected
| introduced | fixed | last affected |
|---|---|---|
| 10.0.0 | 10.2.10 | - |
Fixed versions
| 10.2.10 |
Sources
- osv: GHSA-52jr-x6h6-xj6g
- https://nvd.nist.gov/vuln/detail/CVE-2024-11942
- https://github.com/drupal/core
- https://www.drupal.org/sa-core-2024-002
CVE-2024-11942 · published · modified · JSON