CVE-2024-13272
CVE-2024-13272 · Paragraphs table - Critical - Access bypass, Information Disclosure - SA-CONTRIB-2024-036
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Insufficient Granularity of Access Control vulnerability in Drupal Paragraphs table allows Content Spoofing.This issue affects Paragraphs table: from 0.0.0 before 1.23.0, from 2.0.0 before 2.0.2.
CVSS 6.3 · Medium · EPSS 0.3% · Fix available
- Published
- Updated
Stack: php
Affected products and versions
paragraphs table
- Versions
- ≥ 0.0.0, < 1.23.0: Affected (semver)
- ≥ 2.0.0, < 2.0.2: Affected (semver)
Update to 1.23.0; Update to 2.0.2
drupal/paragraphs_table Packagist:https://packages.drupal.org/8
- Affected ranges
- ECOSYSTEM: < 1.23.0
- ECOSYSTEM: ≥ 2.0.0, < 2.0.2
Update to 1.23.0; Update to 2.0.2