CVE-2024-13259

The Drupal Image Sizes module is vulnerable to an access bypass due to the insertion of sensitive information into sent data . The module fails to sufficiently check access to rendered images, which allows a malicious actor to bypass security restrictions and execute a Forceful Browsing attack. T...