Unpublished Node Permissions
An incorrect authorization issue allows forceful browsing. The module, which manages permissions per node content type to control access to unpublished content, incorrectly allows view access for published content, overriding other existing access mechanisms.