CVE-2024-13249

Node Access Rebuild Progressive - Less critical - Access bypass - SA-CONTRIB-2024-013

State
Published
Severity
5.4 Medium
Published
Jan 9, 2025
Updated
Jan 10, 2025
Reserved
Jan 9, 2025

Read the record on cve.org

Description

Improper Ownership Management vulnerability in Drupal Node Access Rebuild Progressive allows Target Influence via Framing.This issue affects Node Access Rebuild Progressive: from 7.X-1.0 before 7.X-1.2.

Scores

CVSSScoreVectorSource
3.15.4 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:NCISA-ADP

Weaknesses

  • CWE-282 Improper Ownership Management

Affected Products

ProductVersions
Node Access Rebuild ProgressiveDrupal
  • 7.x-1.0 to before 7.x-1.2Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.