Skip to content
OpenAdvisories
Critical · 9.1 CVE-2024-13278 DRUPAL-CONTRIB-2024-042EUVD-2024-51491GHSA-223j-7cj4-4cw7

Diff - Moderately critical - Access bypass, Information Disclosure - SA-CONTRIB-2024-042

Published Jan 9, 2025 · Updated Jan 10, 2025 · Assigned by drupal

Vendor: Drupal Product: Diff Package: drupal/diff Ecosystem: Packagist

Description

Incorrect Authorization vulnerability in Drupal Diff allows Functionality Misuse.This issue affects Diff: from 0.0.0 before 1.8.0.

Affected products

VendorProductAffectedFixed
Drupal Diff 0.0.0 – < 1.8.0 1.8.0

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/diff < 1.8.0 · >= 2.0.0-beta1, < 2.0.0-beta3 1.8.0, 2.0.0-beta3 DRUPAL-CONTRIB-2024-042

Advisories 1

References