PT-2024-10094
CVE-2024-13258
·
Published
2024-05-29
·
Updated
2025-01-13
Description by
CVSS 2.0
10
CriticalMetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Drupal REST & JSON API Authentication versions 0.0.0 through 2.0.12
Description
The issue is related to an Incorrect Authorization vulnerability in Drupal REST & JSON API Authentication, allowing Forceful Browsing. This can enable a remote attacker to bypass existing security restrictions.
Recommendations
For versions 0.0.0 through 2.0.12, update to version 2.0.13 or later to resolve the issue. As a temporary workaround, consider restricting access to the REST & JSON API Authentication module until a patch is applied.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾