CVE-2024-13243
CVE-2024-13243 · Entity Delete Log - Moderately critical - Access bypass - SA-CONTRIB-2024-007
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Missing Authorization vulnerability in Drupal Entity Delete Log allows Forceful Browsing.This issue affects Entity Delete Log: from 0.0.0 before 1.1.1.
CVSS 6.5 · Medium · EPSS 0.3% · Fix available
- Published
- Updated
Stack: php
Affected products and versions
entity delete log
- Versions
- ≥ 0.0.0, < 1.1.1: Affected (semver)
Update to 1.1.1
drupal/entity_delete_log Packagist:https://packages.drupal.org/8
- Affected ranges
- ECOSYSTEM: < 1.1.1
Update to 1.1.1