CVE-2024-13243

Missing Authorization vulnerability in Drupal Entity Delete Log allows Forceful Browsing.This issue affects Entity Delete Log: from 0.0.0 before 1.1.1.
CVSS

No CVSS.

References
Link Resource
https://www.drupal.org/sa-contrib-2024-007 Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:entity_delete_log_project:entity_delete_log:*:*:*:*:*:drupal:*:*

History

04 Jun 2025, 16:50

Type Values Removed Values Added
CWE CWE-862
References () https://www.drupal.org/sa-contrib-2024-007 - () https://www.drupal.org/sa-contrib-2024-007 - Vendor Advisory
First Time Entity Delete Log Project
Entity Delete Log Project entity Delete Log
CPE cpe:2.3:a:entity_delete_log_project:entity_delete_log:*:*:*:*:*:drupal:*:*

09 Jan 2025, 19:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-01-09 19:15

Updated : 2025-06-04 16:50


NVD link : CVE-2024-13243

Mitre link : CVE-2024-13243


JSON object : View

Products Affected

entity_delete_log_project

  • entity_delete_log
CWE
CWE-862

Missing Authorization