Kurz gesagt
- CVE-2024-13304 ist eine Schwachstelle (MITTEL (CVSS 4.5)) in drupal/minifyjs, minify js (matthiasmullie).
- Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.18%, höher als bei 7.4% aller Schwachstellen.
- Abhilfe: auf 3.0.3 oder neuer aktualisieren.
| Package | Affected versions | Patched versions |
|---|
| drupal/minifyjs Packagist:https://packages.drupal.org/8 | < 3.0.3
| 3.0.3
|
| minify js | < 3.0.3
| 3.0.3
|
Description
The Minify JS module allows a site administrator to minify all javascript files that exist in the site's code base and use those minified files on the front end of the website.
Several administrator routes are unprotected against Cross-Site Request Forgery (CRSF) attacks.
NVD description
Cross-Site Request Forgery (CSRF) vulnerability in Drupal Minify JS allows Cross Site Request Forgery.This issue affects Minify JS: from 0.0.0 before 3.0.3.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free