CVE-2024-13277

creationtimestamp| type| source ---|---|--- 2025-01-09 19:33:37+00:00| seen| https://infosec.exchange/users/cve/statuses/113800066962592374 2025-01-09 20:16:39+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdiny3nob25 2025-01-10 17:04:48+00:00| seen|...

CVE-2024-13277

CVE-2024-13277 affects the Drupal Smart IP Ban module (versions 7.X-1.0 through 7.X-1.1). The issue is improper/incorrect authorization enabling forceful browsing to view/modify module settings or restricted paths. Root cause: insufficient authorization controls in the Smart IP Ban plugin. Impact...