CVE-2024-41709
1 advisory.
Packagist/backdrop/backdrop CVE-2024-41709: medium 4.8
Backdrop CMS does not sufficiently sanitize field labels before they are displayed in certain places
Action: Upgrade backdrop/backdrop to 1.27.3 or later.
composer require backdrop/backdrop:1.27.3composer require backdrop/backdrop:1.28.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.27.3 | - |
| 1.28.0 | 1.28.2 | - |
Fixed versions
| 1.27.3 | 1.28.2 |
Sources
- osv: GHSA-3wmx-48g3-x66g
- https://nvd.nist.gov/vuln/detail/CVE-2024-41709
- https://github.com/backdrop/backdrop/commit/c7ff0500705668e3f58263590812872e44059301
- https://github.com/backdrop/backdrop/commit/f1dfe710c186fb47c9d949f01f37e5ab42b44030
- https://backdropcms.org/security/backdrop-sa-core-2024-001
- https://github.com/backdrop-ops/backdrop-composer
CVE-2024-41709 · published · modified · JSON