CVE-2024-13277

creationtimestamp| type| source ---|---|--- 2025-01-09 19:33:37+00:00| seen| https://infosec.exchange/users/cve/statuses/113800066962592374 2025-01-09 20:16:39+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdiny3nob25 2025-01-10 17:04:48+00:00| seen|...

CVE-2024-13277

The Drupal Smart IP Ban module (versions 7.X-1.0 before 7.X-1.1 ) is susceptible to an Incorrect Authorization vulnerability. The root cause is an insufficient authentication mechanism where the module fails to sufficiently protect access to certain paths. This allows a remote attacker to perform...