Researchers
Back
Malay Nayak
#45601
of 60,399
6.8
Total CVSS
Vulnerabilities
·
1
PT-2024-10361
2024-01-31
6.8
CVE-2024-13243
Drupal
Drupal Entity Delete Log
The issue is related to a lack of authorization in the Drupal Entity Delete Log, which allows for forceful browsing. This can enable a remote attacker to bypass security restrictions and perform a forceful browsing attack.