1 line
1.1 KiB
JSON
1 line
1.1 KiB
JSON
{"schema_version":"1.9.0","id":"DRUPAL-CONTRIB-2024-014","published":"2024-02-28T18:36:35Z","modified":"2026-09-10T03:46:12.679124706Z","aliases":["CVE-2024-13250"],"details":"The module doesn’t sufficiently protect against malicious links, which means an attacker can trick an administrator into performing unwanted actions.\n\nThis vulnerability is mitigated by the fact that the set of unwanted actions is limited to specific configurations.","affected":[{"package":{"name":"drupal/symfony_mailer_lite","ecosystem":"Packagist:https://packages.drupal.org/8","purl":"pkg:composer/drupal/symfony_mailer_lite?repository_url=https:%2F%2Fpackages.drupal.org%2F8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.6"}],"database_specific":{"constraint":"<1.0.6"}}],"database_specific":{"affected_versions":"<1.0.6","source":"https://github.com/DrupalSecurityTeam/drupal-advisory-database/blob/main/advisories/symfony_mailer_lite/DRUPAL-CONTRIB-2024-014.json"}}],"references":[{"type":"WEB","url":"https://www.drupal.org/sa-contrib-2024-014"}],"credits":[{"name":"Mingsong","contact":["https://www.drupal.org/user/2986445"]}]} |