Insertion of Sensitive Information Into Sent Data vulnerability in Drupal Image Sizes allows Forceful Browsing.This issue affects Image Sizes: from 0.0.0 before 3.0.2.
CVSS 3.1HIGH 7.5·Network·No auth·No interaction·EPSS 0.00498·Published 2025-01-09·Fixed in 3.0.2CWE-201