CVE-2024-13291

Incorrect Authorization vulnerability in Drupal Basic HTTP Authentication allows Forceful Browsing.This issue affects Basic HTTP Authentication: from 7.X-1.0 before 7.X-1.4.

Score

CVSS 3.1 7.3 High

Status

Analyzed - mlhess@drupal.org

Published

2025-01-09

Last modified

2025-01-10

Weaknesses

CWE-863

Affected products

• Basic Http Authentication (Basic Http Authentication Project)
• Basic Http Authentication (Drupal)

References

• https://www.drupal.org/sa-contrib-2024-057