PT-2024-40345 · Unknown · Contextual Links

Published 2024-05-15 · Updated 2024-05-15

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Contextual Links module (affected versions not specified)

Description The issue arises from insufficient validation of requested contextual links by the Contextual Links module. However, the risk is mitigated because an attacker would need to have a role with the permission access contextual links to exploit this.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

GHSA-JJX7-8462-W4M4

Affected Products

Contextual Links

References · 4

• https://osv.dev/vulnerability/GHSA-jjx7-8462-w4m4 · Vendor Advisory
• https://github.com/drupal/drupal · Note
• https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/drupal/2018-10-17-5.yaml · Note
• https://drupal.org/sa-core-2018-006 · Note