Description
Cross-Site Request Forgery (CSRF) vulnerability in Drupal POST File allows Cross Site Request Forgery.This issue affects POST File: from 0.0.0 before 1.0.2.
Published: 2025-01-09
Score: 3.1 Low
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2024-51506 Cross-Site Request Forgery (CSRF) vulnerability in Drupal POST File allows Cross Site Request Forgery.This issue affects POST File: from 0.0.0 before 1.0.2.
References
Link Providers
https://www.drupal.org/sa-contrib-2024-059 cve-icon cve-icon
History

Tue, 02 Sep 2025 19:00:00 +0000

Type Values Removed Values Added
First Time appeared Post File Project
Post File Project post File
CPEs cpe:2.3:a:post_file_project:post_file:*:*:*:*:*:drupal:*:*
Vendors & Products Post File Project
Post File Project post File

Fri, 10 Jan 2025 19:15:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 3.1, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 09 Jan 2025 20:30:00 +0000

Type Values Removed Values Added
Description Cross-Site Request Forgery (CSRF) vulnerability in Drupal POST File allows Cross Site Request Forgery.This issue affects POST File: from 0.0.0 before 1.0.2.
Title POST File - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2024-059
Weaknesses CWE-352
References

Subscriptions

Post File Project Post File
cve-icon MITRE

Status: PUBLISHED

Assigner: drupal

Published:

Updated: 2025-01-10T18:15:47.262Z

Reserved: 2025-01-09T18:28:28.754Z

Link: CVE-2024-13293

cve-icon Vulnrichment

Updated: 2025-01-10T18:15:36.516Z

cve-icon NVD

Status : Analyzed

Published: 2025-01-09T21:15:26.780

Modified: 2025-09-02T18:31:00.480

Link: CVE-2024-13293

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses