CVE-2024-13280

The Drupal Persistent Login module is vulnerable to insufficient session expiration , which allows for forceful browsing . The root cause is that the module fails to sufficiently check a user's disabled status when validating cookies and relates to incorrect session durations. This could impact t...