CVE-2024-13256
Email Contact - Moderately critical - Access bypass - SA-CONTRIB-2024-020
Résumé
Email Contact - Moderately critical - Access bypass - SA-CONTRIB-2024-020
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Insufficient Granularity of Access Control vulnerability in Drupal Email Contact allows Forceful Browsing.This issue affects Email Contact: from 0.0.0 before 2.0.4.
Paquets affectés
Packagist:https://packages.drupal.org/8
drupal/email_contact
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.4"}],"database_specific":{"constraint":"<2.0.4"}}]
Références
- advisory github.com
- advisory nvd.nist.gov
- web drupal.org
- web git.drupalcode.org
- web drupal.org