CVE-2024-13253

The Drupal Advanced PWA inc Push Notifications module (versions prior to 1.5.0 ) is vulnerable to an incorrect authorization issue. This flaw allows an unauthorized malicious actor to bypass security restrictions to perform a Forceful Browsing attack. Specifically, the module fails to sufficientl...

CVE-2024-13253 Advanced PWA - Critical - Access bypass - SA-CONTRIB-2024-017

Incorrect Authorization vulnerability in Drupal Advanced PWA inc Push Notifications allows Forceful Browsing.This issue affects Advanced PWA inc Push Notifications: from 0.0.0 before 1.5.0...

CVE-2024-13253 Advanced PWA - Critical - Access bypass - SA-CONTRIB-2024-017

Incorrect Authorization vulnerability in Drupal Advanced PWA inc Push Notifications allows Forceful Browsing.This issue affects Advanced PWA inc Push Notifications: from 0.0.0 before 1.5.0...