Vulnerability advisory
CVE-2023-5256
Drupal core - Critical - Cache poisoning - SA-CORE-2023-006
Also known as BIT-drupal-2023-5256DRUPAL-CORE-2023-006GHSA-rjqg-3h9m-fx5x
Severity
- CVSS 3.x
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected versions
Repository
| Affected commits | Fixed by commit |
|---|---|
| GIT github.com/drupal/drupal ↗ | |
| 17ba30046ed57677de4feff8d07354890b40efdb to before 4576b6a4f1ac7e94a7547f226892a01999026cf2 | 4576b6a4f1ac7e94a7547f226892a01999026cf2 |
| 2700c5afb6c3936041db413872eea82dc0bd4fe4 to before 1af23a31ad13552ad38f3688371b48d8e7b8be25 | 1af23a31ad13552ad38f3688371b48d8e7b8be25 |
| a5d9f165ea7eab533e0bbc5cab7336b7e38e1d20 to before 95d7b130e5db9fe05f3ed89af38cfd40083e6d11 | 95d7b130e5db9fe05f3ed89af38cfd40083e6d11 |
Also listed as affected (10)
| |
Description
In certain scenarios, Drupal's JSON:API module will output error backtraces. With some configurations, this may cause sensitive information to be cached and made available to anonymous users, leading to privilege escalation.
This vulnerability only affects sites with the JSON:API module enabled, and can be mitigated by uninstalling JSON:API.
The core REST and contributed GraphQL modules are not affected.