CVE-2024-13278

Incorrect Authorization vulnerability in Drupal Diff allows Functionality Misuse.This issue affects Diff: from 0.0.0 before 1.8.0...

CVE-2024-13278

creationtimestamp| type| source ---|---|--- 2025-01-09 19:48:37+00:00| seen| https://infosec.exchange/users/cve/statuses/113800125966170821 2025-01-09 20:16:43+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdio35uar25 2025-01-10 17:05:21+00:00| seen|...

CVE-2024-13278 Diff - Moderately critical - Access bypass, Information Disclosure - SA-CONTRIB-2024-042

Incorrect Authorization vulnerability in Drupal Diff allows Functionality Misuse.This issue affects Diff: from 0.0.0 before 1.8.0...

CVE-2024-13278 Diff - Moderately critical - Access bypass, Information Disclosure - SA-CONTRIB-2024-042

Incorrect Authorization vulnerability in Drupal Diff allows Functionality Misuse.This issue affects Diff: from 0.0.0 before 1.8.0...

CVE-2024-13278

The Drupal Diff module (versions prior to 1.8.0 ) contains an incorrect authorization vulnerability. The flaw stems from the module failing to sufficiently check revision access before rendering a diff report for nodes or general entities that support diff. A remote attacker who possesses the per...