CVE-2024-13258

Incorrect Authorization vulnerability in Drupal Drupal REST & JSON API Authentication allows Forceful Browsing.This issue affects Drupal REST & JSON API Authentication: from 0.0.0 before 2.0.13...

CVE-2024-13258

creationtimestamp| type| source ---|---|--- 2025-01-09 19:13:03+00:00| seen| https://infosec.exchange/users/cve/statuses/113799986053818546 2025-01-09 19:15:31+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1021 2025-01-09 19:16:28+00:00| seen|...

CVE-2024-13258 Drupal REST & JSON API Authentication - Moderately critical - Access bypass - SA-CONTRIB-2024-022

Incorrect Authorization vulnerability in Drupal Drupal REST & JSON API Authentication allows Forceful Browsing.This issue affects Drupal REST & JSON API Authentication: from 0.0.0 before 2.0.13...

CVE-2024-13258 Drupal REST & JSON API Authentication - Moderately critical - Access bypass - SA-CONTRIB-2024-022

Incorrect Authorization vulnerability in Drupal Drupal REST & JSON API Authentication allows Forceful Browsing.This issue affects Drupal REST & JSON API Authentication: from 0.0.0 before 2.0.13...

CVE-2024-13258

The Drupal REST & JSON API Authentication module (versions 0.0.0 through 2.0.12 ) is vulnerable to an Incorrect Authorization issue. The root cause is that the module fails to sufficiently control user access when utilizing Basic Authentication , which enables Forceful Browsing . This allows a re...