—

DRUPAL-CONTRIB-2024-070

Details

The Minify JS module allows a site administrator to minify all javascript files that exist in the site's code base and use those minified files on the front end of the website.

Several administrator routes are unprotected against Cross-Site Request Forgery (CRSF) attacks.

Are you affected?

Enter the version of the package you're using.

Affected packages

Packagist:https://packages.drupal.org/8/drupal/minifyjs

Introduced in: 0Fixed in: 3.0.3

Upgrade drupal/minifyjs to 3.0.3 or newer (ecosystem packagist:https://packages.drupal.org/8).

References

https://www.drupal.org/sa-contrib-2024-070[WEB]