CVE-2024-13282

The Drupal Block permissions module (versions 1.0.0 through 1.2.0 ) contains an Incorrect Authorization vulnerability. The root cause is a deficiency in the authentication mechanism where the module fails to sufficiently check permissions when adding a block via the /admin/structure/block/add/{pl...