Skip to content
OpenAdvisories
Medium · 5.3 CVE-2024-13302 DRUPAL-CONTRIB-2024-068EUVD-2024-51515GHSA-9j66-pm9j-3fvj

Pages Restriction Access - Critical - Access bypass - SA-CONTRIB-2024-068

Published Jan 9, 2025 · Updated Jan 10, 2025 · Assigned by drupal

Description

Incorrect Authorization vulnerability in Drupal Pages Restriction Access allows Forceful Browsing.This issue affects Pages Restriction Access: from 2.0.0 before 2.0.3.

Affected products

VendorProductAffectedFixed
Drupal Pages Restriction Access 2.0.0 – < 2.0.3 2.0.3

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/pages_restriction >= 2.0.0, < 2.0.3 2.0.3 DRUPAL-CONTRIB-2024-068

References