CVE-2024-13291

The Drupal Basic HTTP Authentication module (versions 7.X-1.0 through 7.X-1.3 or prior to 7.X-1.4 ) is susceptible to an Incorrect Authorization vulnerability. Deficiencies in the authentication mechanism allow a remote attacker to bypass existing security restrictions, enabling Forceful Browsing...