CVE-2024-13309
Login Disable - Critical - Access bypass - SA-CONTRIB-2024-073
Résumé
Login Disable - Critical - Access bypass - SA-CONTRIB-2024-073
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Improper Authentication vulnerability in Drupal Login Disable allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Login Disable: from 2.0.0 before 2.1.1.
Paquets affectés
Packagist:https://packages.drupal.org/8
drupal/login_disable
[{"type":"ECOSYSTEM","events":[{"introduced":"2.0.0"},{"fixed":"2.1.1"}],"database_specific":{"constraint":">=2.0.0 <2.1.1"}}]
Références
- advisory github.com
- advisory nvd.nist.gov
- web drupal.org
- web git.drupalcode.org
- web drupal.org