Skip to content
OpenAdvisories
High · 7.3 CVE-2024-13291 EUVD-2024-51504GHSA-j7cg-x2c3-v6hf

Basic HTTP Authentication - Critical - Access bypass - SA-CONTRIB-2024-057

Published Jan 9, 2025 · Updated Jan 10, 2025 · Assigned by drupal

Description

Incorrect Authorization vulnerability in Drupal Basic HTTP Authentication allows Forceful Browsing.This issue affects Basic HTTP Authentication: from 7.X-1.0 before 7.X-1.4.

Affected products

VendorProductAffectedFixed
Drupal Basic HTTP Authentication 7.x-1.0 – < 7.x-1.4 7.x-1.4

References