CVE-2024-13248
CVE-2024-13248 · Private content - Moderately critical - Access bypass - SA-CONTRIB-2024-012
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Incorrect Privilege Assignment vulnerability in Drupal Private content allows Target Influence via Framing.This issue affects Private content: from 0.0.0 before 2.1.0.
CVSS 5.5 · Medium · EPSS 0.2% · Fix available
- Published
- Updated
Stack: php
Affected products and versions
private content
- Versions
- ≥ 0.0.0, < 2.1.0: Affected (semver)
Update to 2.1.0
drupal/private_content Packagist:https://packages.drupal.org/8
- Affected ranges
- ECOSYSTEM: < 2.1.0
Update to 2.1.0