CVE-2024-13282

creationtimestamp| type| source ---|---|--- 2025-01-09 20:16:54+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdiofrkko2a 2025-01-09 20:17:42+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1063 2025-01-09 21:57:29+00:00| seen| https://t.me/cvedetector/14910...

CVE-2024-13282

Incorrect Authorization vulnerability in Drupal Block permissions allows Forceful Browsing.This issue affects Block permissions: from 1.0.0 before 1.2.0...

CVE-2024-13282 Block permissions - Moderately critical - Access bypass - SA-CONTRIB-2024-046

Incorrect Authorization vulnerability in Drupal Block permissions allows Forceful Browsing.This issue affects Block permissions: from 1.0.0 before 1.2.0...

CVE-2024-13282

CVE-2024-13282 concerns the Drupal Block permissions module, affected versions 1.0.0 through 1.2.0 (vulnerable). The issue is an incorrect authorization mechanism that can enable forceful browsing (unrestricted access bypass) to protected blocks. Exploitation details are not described beyond this...

CVE-2024-13282 Block permissions - Moderately critical - Access bypass - SA-CONTRIB-2024-046

Incorrect Authorization vulnerability in Drupal Block permissions allows Forceful Browsing.This issue affects Block permissions: from 1.0.0 before 1.2.0...