Drupal HTTP Client Manager Forceful Browsing Vulnerability

A vulnerability allowing forceful browsing has been identified in the Drupal HTTP Client Manager. This issue arises from improper handling of data separation in HTTP request operations, which could lead to information disclosure in rare circumstances. The vulnerability affects HTTP Client Manager versions prior to 9.3.13, as well as versions 10.0.0 prior to 10.0.2 and 11.0.0 prior to 11.0.1.

Impact

Exploitation of this vulnerability could lead to unauthorized information disclosure.

Remediation

Users of the HTTP Client Manager module should upgrade to version 9.3.13, 10.0.2, or 11.0.1, depending on their current version.