Researchers
Back
Corn696
#19046
of 60,403
16.3
Total CVSS
Vulnerabilities
·
2
High
2
PT-2024-10080
2024-12-11
8.5
CVE-2024-13312
Drupal
Open Social
The issue is related to a lack of authorization in Drupal Open Social, which allows forceful browsing. This problem can be exploited by a remote attacker to bypass security restrictions and perform a forceful browsing attack.
PT-2024-10359
2024-01-24
7.8
CVE-2024-13240
Drupal
Open Social
The issue is related to improper access control in Drupal Open Social, allowing the collection of data from common resource locations. This can be exploited by a remote attacker to bypass security restrictions.