Skip to content
OpenAdvisories
Medium · 5.5 CVE-2024-13248 DRUPAL-CONTRIB-2024-012EUVD-2024-51462GHSA-2479-2frf-9263

Private content - Moderately critical - Access bypass - SA-CONTRIB-2024-012

Published Jan 9, 2025 · Updated Jan 10, 2025 · Assigned by drupal

Description

Incorrect Privilege Assignment vulnerability in Drupal Private content allows Target Influence via Framing.This issue affects Private content: from 0.0.0 before 2.1.0.

Affected products

VendorProductAffectedFixed
Drupal Private content 0.0.0 – < 2.1.0 2.1.0

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/private_content < 2.1.0 2.1.0 DRUPAL-CONTRIB-2024-012

Advisories 1

References