6.5
CVE-2024-13243
- EPSS 0.27%
- Veröffentlicht 09.01.2025 19:15:18
- Zuletzt bearbeitet 04.06.2025 16:50:44
- CVE-Watchlists
- Unerledigt
LoginEntity Delete Log - Moderately critical - Access bypass - SA-CONTRIB-2024-007
Missing Authorization vulnerability in Drupal Entity Delete Log allows Forceful Browsing.This issue affects Entity Delete Log: from 0.0.0 before 1.1.1.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Entity Delete Log Project ≫ Entity Delete Log SwPlatformdrupal Version < 1.1.1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.27% | 0.194 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| CISA-ADP | 6.5 | 2.8 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
|
CWE-862 Missing Authorization
The product does not perform an authorization check when an actor attempts to access a resource or perform an action.
https://www.drupal.org/sa-contrib-2024-007