CVE-2024-13280

creationtimestamp| type| source ---|---|--- 2025-01-09 20:16:47+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdio7ojl72l 2025-01-09 20:17:57+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1066 2025-01-10 17:49:02+00:00| seen|...

CVE-2024-13280

Insufficient Session Expiration vulnerability in Drupal Persistent Login allows Forceful Browsing.This issue affects Persistent Login: from 0.0.0 before 1.8.0, from 2.0. before 2.2.2...

CVE-2024-13280 Persistent Login - Moderately critical - Access bypass - SA-CONTRIB-2024-044

Insufficient Session Expiration vulnerability in Drupal Persistent Login allows Forceful Browsing.This issue affects Persistent Login: from 0.0.0 before 1.8.0, from 2.0. before 2.2.2...

CVE-2024-13280

The CVE concerns the Drupal Persistent Login module and an insufficient session expiration vulnerability that allows forceful browsing (access bypass). Affected versions are 0.0.0–before 1.8.0 and 2.0.* before 2.2.2. The root cause, as described in linked advisories, is improper session/cookie ha...