CVE-2024-13256
CVE-2024-13256 · Email Contact - Moderately critical - Access bypass - SA-CONTRIB-2024-020
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Insufficient Granularity of Access Control vulnerability in Drupal Email Contact allows Forceful Browsing.This issue affects Email Contact: from 0.0.0 before 2.0.4.
CVSS 7.5 · High · EPSS 0.4% · Fix available
- Published
- Updated
Stack: php
Affected products and versions
email contact
- Versions
- ≥ 0.0.0, < 2.0.4: Affected (semver)
Update to 2.0.4
drupal/email_contact Packagist:https://packages.drupal.org/8
- Affected ranges
- ECOSYSTEM: < 2.0.4
Update to 2.0.4