Incorrect Authorization vulnerability in Drupal Entity API allows Forceful Browsing. This issue affects Entity API versions: from 0.0.0 to 1.8.0...
5.3CVSS0.00313EPSS
SaveExploits0References1
Prion•added 2020/01/06 6:15 p.m.•21 views
Code injection
An issue was discovered in HashBrown CMS before 1.3.2. Server/Entity/Resource/Connection.js allows an attacker to reach a parent directory via a crafted name or ID field...
