CVE-2024-13291

The Drupal Basic HTTP Authentication module (versions 7.X-1.0 through 7.X-1.3 , and generally prior to 7.X-1.4 ) contains an Incorrect Authorization vulnerability. Due to deficiencies in the authentication mechanism, the module may remove existing access checks for certain paths, allowing a remot...