CVE-2024-13246
Node Access Rebuild Progressive - Less critical - Access bypass - SA-CONTRIB-2024-010
Résumé
Node Access Rebuild Progressive - Less critical - Access bypass - SA-CONTRIB-2024-010
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Improper Ownership Management vulnerability in Drupal Node Access Rebuild Progressive allows Target Influence via Framing.This issue affects Node Access Rebuild Progressive: from 0.0.0 before 2.0.2.
Paquets affectés
Packagist:https://packages.drupal.org/8
drupal/node_access_rebuild_progressive
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.2"}],"database_specific":{"constraint":"<2.0.2"}}]
Références
- advisory github.com
- advisory nvd.nist.gov
- web drupal.org
- web git.drupalcode.org
- web drupal.org