En bref
- CVE-2024-13304 est une vulnérabilité MOYENNE (CVSS 4.5) touchant drupal/minifyjs, minify js (matthiasmullie).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.18%, plus élevée que 7.4% des vulnérabilités.
- Correctif : mettre à jour vers 3.0.3 ou plus récent.
| Package | Affected versions | Patched versions |
|---|
| drupal/minifyjs Packagist:https://packages.drupal.org/8 | < 3.0.3
| 3.0.3
|
| minify js | < 3.0.3
| 3.0.3
|
Description
The Minify JS module allows a site administrator to minify all javascript files that exist in the site's code base and use those minified files on the front end of the website.
Several administrator routes are unprotected against Cross-Site Request Forgery (CRSF) attacks.
NVD description
Cross-Site Request Forgery (CSRF) vulnerability in Drupal Minify JS allows Cross Site Request Forgery.This issue affects Minify JS: from 0.0.0 before 3.0.3.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free