CVE-2024-13277

creationtimestamp| type| source ---|---|--- 2025-01-09 19:33:37+00:00| seen| https://infosec.exchange/users/cve/statuses/113800066962592374 2025-01-09 20:16:39+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdiny3nob25 2025-01-10 17:04:48+00:00| seen|...

CVE-2024-13277

The Smart IP Ban module for the Drupal CMS is vulnerable to an incorrect authorization flaw (CWE-863) in versions 7.X-1.0 before 7.X-1.1 . The root cause is a deficiency in the authentication mechanism, which fails to sufficiently protect access to certain module paths. This allows a remote attac...