Entity Delete Log ProjectEntity Delete Log
1 matches found
CVE-2024-13243
CVE-2024-13243: In Drupal, the Entity Delete Log module (versions 0.0.0 through 1.1.1) suffers a missing authorization vulnerability that enables forceful browsing and an access bypass to log information. The issue is rooted in insufficient permissions handling for the log view/report page, enabl...
6.5CVSS6.6AI score0.00272EPSS
Save