← Database

CVE-2024-45440

MEDIUM CVSS: 5.3 Published: 2024-08-29 Modified: 2026-06-17

Description

core/authorize.php in Drupal 11.x-dev allows Full Path Disclosure (even when error logging is None) if the value of hash_salt is file_get_contents of a file that does not exist.

Affected Platforms

Drupal Drupal

Weakness Type

CWE-209, CWE-209

References