CVE-2024-13272 | THREATINT

Description

Insufficient Granularity of Access Control vulnerability in Drupal Paragraphs table allows Content Spoofing.This issue affects Paragraphs table: from 0.0.0 before 1.23.0, from 2.0.0 before 2.0.2.

PUBLISHED Reserved 2025-01-09 | Published 2025-01-09 | Updated 2025-01-14 | Assigner drupal

Problem types

CWE-1220 Insufficient Granularity of Access Control

Product status

Default status

unaffected

0.0.0 (semver) before 1.23.0

affected

2.0.0 (semver) before 2.0.2

affected

Credits

James Williams finder

James Williams remediation developer

NGUYEN Bao remediation developer

Steven Jones remediation developer

Joseph Olstad remediation developer

Greg Knaddison coordinator

Jess coordinator

Juraj Nemec coordinator

References

www.drupal.org/sa-contrib-2024-036

cve.org (CVE-2024-13272)

nvd.nist.gov (CVE-2024-13272)

Download JSON