CVE-2024-13302

The Pages Restriction Access module in the Drupal CMS (versions 2.0.0 through 2.0.3 ) is vulnerable to an Incorrect Authorization issue. The root cause is a deficiency in the authentication mechanism where the module fails to adequately protect certain types of URLs. This flaw allows unauthentica...

CVE-2024-13302 Pages Restriction Access - Critical - Access bypass - SA-CONTRIB-2024-068

Incorrect Authorization vulnerability in Drupal Pages Restriction Access allows Forceful Browsing.This issue affects Pages Restriction Access: from 2.0.0 before 2.0.3...