Cpe:2.3:a:drupal:drupal:2023-05-09:*:*:*:*:*:*:*

CVE-2024-45440 is a full path disclosure vulnerability in Drupal 11.x-dev allowing unauthenticated attackers to leak server-side filesystem paths via the authorize.php endpoint.