{"action":"Upgrade drupal/drupal to 10.2.9 or later.","affected":[{"fixed":"10.3.6","introduced":"10.3.0"},{"fixed":"11.0.5","introduced":"11.0.0"},{"fixed":"10.2.9","introduced":"8.0.0"}],"component":"drupal/drupal","cve_ids":["CVE-2024-45440"],"ecosystem":"Packagist","epss":0.09269,"exploited":false,"fixed_versions":["10.3.6","11.0.5","10.2.9"],"ghsa_id":"GHSA-mg8j-w93w-xjgc","id":"tcs_01M5KF5GNGBNRBVSDAXYC7R66H","modified_at":"2025-04-23T15:02:55.541812Z","published_at":"2024-08-29T12:31:05Z","references":["https://osv.dev/vulnerability/GHSA-mg8j-w93w-xjgc","https://nvd.nist.gov/vuln/detail/CVE-2024-45440","https://github.com/github/advisory-database/pull/4827","https://github.com/drupal/drupal","https://senscybersecurity.nl/CVE-2024-45440-Explained","https://www.drupal.org/project/drupal/issues/3457781","https://www.drupal.org/project/drupal/releases/10.2.9","https://www.drupal.org/project/drupal/releases/10.3.6","https://www.drupal.org/project/drupal/releases/11.0.5","https://www.exploit-db.com/exploits/52266"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-mg8j-w93w-xjgc","url":"https://osv.dev/vulnerability/GHSA-mg8j-w93w-xjgc"}],"summary":"Drupal Full Path Disclosure"}