Skip to content
OpenAdvisories
Medium · 5.3 CVE-2024-13290 DRUPAL-CONTRIB-2024-056EUVD-2024-51503GHSA-mxgx-9cvp-m653

OhDear Integration - Moderately critical - Access bypass - SA-CONTRIB-2024-056

Published Jan 9, 2025 · Updated Jan 14, 2025 · Assigned by drupal

Description

Incorrect Authorization vulnerability in Drupal OhDear Integration allows Forceful Browsing.This issue affects OhDear Integration: from 0.0.0 before 2.0.4.

Affected products

VendorProductAffectedFixed
Drupal OhDear Integration 0.0.0 – < 2.0.4 2.0.4

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/ohdear_integration < 2.0.4 2.0.4 DRUPAL-CONTRIB-2024-056

Advisories 1

References