CVE-2024-13246
Node Access Rebuild Progressive - Less critical - Access bypass - SA-CONTRIB-2024-010
Summary
Node Access Rebuild Progressive - Less critical - Access bypass - SA-CONTRIB-2024-010
Original description
The description as published by the source.
Improper Ownership Management vulnerability in Drupal Node Access Rebuild Progressive allows Target Influence via Framing.This issue affects Node Access Rebuild Progressive: from 0.0.0 before 2.0.2.
Affected packages
Packagist:https://packages.drupal.org/8
drupal/node_access_rebuild_progressive
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.2"}],"database_specific":{"constraint":"<2.0.2"}}]
References
- advisory github.com
- advisory nvd.nist.gov
- web drupal.org
- web git.drupalcode.org
- web drupal.org