—
DRUPAL-CONTRIB-2025-126
Details
Http Client Manager introduces a new Guzzle based plugin which allows you to manage HTTP clients using Guzzle Service Descriptions via YAML, JSON or PHP files, in a simple and efficient way. The modules allows administrators to configure HTTP requests as part of Event Condition Action (ECA) automation.
The module does not sufficiently maintain separation of data from request operations, potentially leading to information disclosure in very uncommon situations.
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist:https://packages.drupal.org/8/drupal/http_client_manager
Introduced in:
0Fixed in: 9.3.13Upgrade drupal/http_client_manager to 9.3.13 or newer (ecosystem packagist:https://packages.drupal.org/8).