CVE-2024-13271

The Content Entity Clone module for the Drupal CMS (versions 0.0.0 through 1.0.4 ) contains an incorrect authorization vulnerability. The module fails to properly verify a user's access permissions for the original entity during the cloning process. This allows a user with permission to create co...