CVE-2024-13272

Summary

Insufficient Granularity of Access Control vulnerability in Drupal Paragraphs table allows Content Spoofing.This issue affects Paragraphs table: from 0.0.0 before 1.23.0, from 2.0.0 before 2.0.2.

Affected Software

VendorProductVersion RangeStatus
DrupalParagraphs table0.0.0 < 1.23.0affected
DrupalParagraphs table2.0.0 < 2.0.2affected

Weaknesses

  • CWE-1220: CWE-1220 Insufficient Granularity of Access Control

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References