PT-2026-84886

Name of the Vulnerable Software and Affected Versions Drupal Advanced Search versions 0.0.0 through 2.4.5 Description A missing authorization issue allows forceful browsing. The module fails to sufficiently verify block access when arbitrary block IDs are submitted to its publicly accessible AJAX...