CVE-2024-13277

The Smart IP Ban module for the Drupal CMS is vulnerable to an incorrect authorization flaw (CWE-863) in versions 7.X-1.0 before 7.X-1.1 . The root cause is a deficiency in the authentication mechanism, which fails to sufficiently protect access to certain module paths. This allows a remote attac...