CVE-2024-13240

creationtimestamp| type| source ---|---|--- 2025-01-09 18:52:25+00:00| seen| https://infosec.exchange/users/cve/statuses/113799904942981387 2025-01-09 19:15:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdfawfyq42f...

CVE-2024-13240 Open Social - Moderately critical - Access bypass - SA-CONTRIB-2024-004

Improper Access Control vulnerability in Drupal Open Social allows Collect Data from Common Resource Locations.This issue affects Open Social: from 0.0.0 before 12.05...

CVE-2024-13240 Open Social - Moderately critical - Access bypass - SA-CONTRIB-2024-004

Improper Access Control vulnerability in Drupal Open Social allows Collect Data from Common Resource Locations.This issue affects Open Social: from 0.0.0 before 12.05...

CVE-2024-13240

The Open Social CMS (based on Drupal ) is vulnerable to an improper access control issue in versions prior to 12.05 . The vulnerability allows for the collection of data from common resource locations because users can create public content even when such actions should be restricted. This could ...