CVE-2024-13258

Incorrect Authorization vulnerability in Drupal Drupal REST & JSON API Authentication allows Forceful Browsing.This issue affects Drupal REST & JSON API Authentication: from 0.0.0 before 2.0.13...

CVE-2024-13258

creationtimestamp| type| source ---|---|--- 2025-01-09 19:13:03+00:00| seen| https://infosec.exchange/users/cve/statuses/113799986053818546 2025-01-09 19:15:31+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1021 2025-01-09 19:16:28+00:00| seen|...

CVE-2024-13258 Drupal REST & JSON API Authentication - Moderately critical - Access bypass - SA-CONTRIB-2024-022

Incorrect Authorization vulnerability in Drupal Drupal REST & JSON API Authentication allows Forceful Browsing.This issue affects Drupal REST & JSON API Authentication: from 0.0.0 before 2.0.13...

CVE-2024-13258

The Drupal REST & JSON API Authentication module (versions 0.0.0 through 2.0.12) is vulnerable to an Incorrect Authorization flaw. This issue stems from insufficient control over user access when utilizing Basic Authentication , which allows for Forceful Browsing . A remote attacker can exploit t...

CVE-2024-13258 Drupal REST & JSON API Authentication - Moderately critical - Access bypass - SA-CONTRIB-2024-022

Incorrect Authorization vulnerability in Drupal Drupal REST & JSON API Authentication allows Forceful Browsing.This issue affects Drupal REST & JSON API Authentication: from 0.0.0 before 2.0.13...