CVE-2024-13256

Insufficient Granularity of Access Control vulnerability in Drupal Email Contact allows Forceful Browsing.This issue affects Email Contact: from 0.0.0 before 2.0.4...

CVE-2024-13256

creationtimestamp| type| source ---|---|--- 2025-01-09 19:13:02+00:00| seen| https://infosec.exchange/users/cve/statuses/113799986024892307 2025-01-09 19:16:03+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1023 2025-01-09 19:16:22+00:00| seen|...

CVE-2024-13256 Email Contact - Moderately critical - Access bypass - SA-CONTRIB-2024-020

Insufficient Granularity of Access Control vulnerability in Drupal Email Contact allows Forceful Browsing.This issue affects Email Contact: from 0.0.0 before 2.0.4...

CVE-2024-13256 Email Contact - Moderately critical - Access bypass - SA-CONTRIB-2024-020

Insufficient Granularity of Access Control vulnerability in Drupal Email Contact allows Forceful Browsing.This issue affects Email Contact: from 0.0.0 before 2.0.4...

CVE-2024-13256

The Email Contact module for the Drupal CMS is vulnerable to an Insufficient Granularity of Access Control vulnerability (CWE-1220) affecting versions 0.0.0 through 2.0.4 . The root cause is that the module fails to sufficiently handle restricted entity or field access to the mail sending form wh...