CVE-2024-13282

Incorrect Authorization vulnerability in Drupal Block permissions allows Forceful Browsing.This issue affects Block permissions: from 1.0.0 before 1.2.0...

CVE-2024-13282

The Drupal Block permissions module (versions 1.0.0 through 1.2.0 ) contains an Incorrect Authorization vulnerability. The root cause is a deficiency in the authentication mechanism where the module fails to sufficiently check permissions when adding a block via the /admin/structure/block/add/{pl...

CVE-2024-13282 Block permissions - Moderately critical - Access bypass - SA-CONTRIB-2024-046

Incorrect Authorization vulnerability in Drupal Block permissions allows Forceful Browsing.This issue affects Block permissions: from 1.0.0 before 1.2.0...

CVE-2024-13282 Block permissions - Moderately critical - Access bypass - SA-CONTRIB-2024-046

Incorrect Authorization vulnerability in Drupal Block permissions allows Forceful Browsing.This issue affects Block permissions: from 1.0.0 before 1.2.0...

Drupal Block permissions module 1.0.0-1.1.9 - Administrator+ Broken Access Control vulnerability

Administrator+ Broken Access Control vulnerability discovered by Francesco Sardara in WordPress Module Block permissions versions 1.0.0-1.1.9...