CVE-2024-13280

The Drupal Persistent Login module is vulnerable to an insufficient session expiration issue, which allows for forceful browsing . This flaw is caused by an incorrect session duration and the module's failure to sufficiently check a user's disabled status when validating cookies. Exploiting this ...