Incorrect Authorization Vulnerability in OhDear Integration for Drupal
CVE-2024-13290

Currently unrated

Key Information:

Vendor

Drupal
Vendor
CVE Published:
9 January 2025

What is CVE-2024-13290?

The OhDear Integration component for Drupal suffers from an incorrect authorization vulnerability that enables forceful browsing. This flaw could allow unauthorized users to gain access to restricted areas of the application. The issue specifically affects versions from 0.0.0 and prior to 2.0.4, making it essential for users to update to a patched version to maintain application security.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://www.drupal.org/sa-contrib-2024-056

Timeline

  • Vulnerability published

JSON
.