CVE-2024-13282

The Drupal Block permissions module (versions 1.0.0 through 1.2.0 ) contains an Incorrect Authorization vulnerability that allows Forceful Browsing . The root cause is a deficiency in the authentication mechanism where the module fails to sufficiently check permissions when a block is added via t...