Skip to content
OpenAdvisories
Critical · 9.8 CVE-2024-13258 DRUPAL-CONTRIB-2024-022EUVD-2024-51472GHSA-7649-pgpq-cpch

Drupal REST & JSON API Authentication - Moderately critical - Access bypass - SA-CONTRIB-2024-022

Published Jan 9, 2025 · Updated Jan 10, 2025 · Assigned by drupal

Description

Incorrect Authorization vulnerability in Drupal Drupal REST & JSON API Authentication allows Forceful Browsing.This issue affects Drupal REST & JSON API Authentication: from 0.0.0 before 2.0.13.

Affected products

VendorProductAffectedFixed
Drupal Drupal REST & JSON API Authentication 0.0.0 – < 2.0.13 2.0.13

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/rest_api_authentication < 2.0.13 2.0.13 DRUPAL-CONTRIB-2024-022

Advisories 1

References