CVE-2024-13253

The Drupal Advanced PWA inc Push Notifications module (versions prior to 1.5.0 ) is vulnerable to an incorrect authorization issue. This flaw allows an unauthorized malicious actor to bypass security restrictions to perform a Forceful Browsing attack. Specifically, the module fails to sufficientl...