CVE-2025-48916

creationtimestamp| type| source ---|---|--- 2025-06-13 17:55:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lriz2e7wht2r 2025-06-13 19:03:31+00:00| seen| Telegram/4Ga2KnPxVC8teo9C6hWW8v7cz1iZaC5NGvXAx1RBKflQoQ...

CVE-2025-48916 Bookable Calendar - Less critical - Access bypass - SA-CONTRIB-2025-070

Missing Authorization vulnerability in Drupal Bookable Calendar allows Forceful Browsing.This issue affects Bookable Calendar: from 0.0.0 before 2.2.13...

CVE-2025-48916

CVE-2025-48916 affects Drupal Bookable Calendar before 2.2.13. A missing/incorrect authorization check in the module allows forceful browsing (unauthenticated access/bypass) to vulnerable resources. Affected versions are 0.0.0 through 2.2.12; patch 2.2.13 or later is the recommended remediation. ...