Drupal 10.3.0-10.3.5 - Full Path Disclosure via Missing hash_salt File
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2024-45440. PoCs published by Milad karimi, w0r1i0g1ht, zoomdbz. A Nuclei detection template is also available.
AI-analyzed exploit summary This script scans for CVE-2024-45440, a full path disclosure vulnerability in Drupal 11.x-dev. It checks for the presence of 'settings.php' in the response from '/core/authorize.php' and extracts the full path if vulnerable.
Description
core/authorize.php in Drupal 11.x-dev allows Full Path Disclosure (even when error logging is None) if the value of hash_salt is file_get_contents of a file that does not exist.
Exploits (3)
This script scans for CVE-2024-45440, a full path disclosure vulnerability in Drupal 11.x-dev. It checks for the presence of 'settings.php' in the response from '/core/authorize.php' and extracts the full path if vulnerable.
The repository contains a Python script that scans for CVE-2024-45440, a Drupal 11.x-dev Full Path Disclosure vulnerability in core/authorize.php. The script checks for the presence of 'settings.php' in the response and extracts the full path if vulnerable.
This repository contains a Python-based scanner for CVE-2024-45440, which targets a full path disclosure vulnerability in Drupal 11.x-dev. The tool checks for the presence of sensitive paths in the response from the `/core/authorize.php` endpoint.
Nuclei Templates (1)
http.component:"drupal" || cpe:"cpe:2.3:a:drupal:drupal"
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N