CVE-2024-13280

creationtimestamp| type| source ---|---|--- 2025-01-09 20:16:47+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdio7ojl72l 2025-01-09 20:17:57+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1066 2025-01-10 17:49:02+00:00| seen|...

CVE-2024-13280

Insufficient Session Expiration vulnerability in Drupal Persistent Login allows Forceful Browsing.This issue affects Persistent Login: from 0.0.0 before 1.8.0, from 2.0. before 2.2.2...

CVE-2024-13280

The Drupal Persistent Login module is vulnerable to insufficient session expiration , which allows for forceful browsing . The root cause is that the module fails to sufficiently check a user's disabled status when validating cookies and relates to incorrect session durations. This could impact t...

CVE-2024-13280 Persistent Login - Moderately critical - Access bypass - SA-CONTRIB-2024-044

Insufficient Session Expiration vulnerability in Drupal Persistent Login allows Forceful Browsing.This issue affects Persistent Login: from 0.0.0 before 1.8.0, from 2.0. before 2.2.2...