CVE-2024-13246

Published: Jan 9, 2025Modified: Jun 17, 2026

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Exploitability: 3.9 / Impact: 1.4

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Improper Ownership Management vulnerability in Drupal Node Access Rebuild Progressive allows Target Influence via Framing.This issue affects Node Access Rebuild Progressive: from 0.0.0 before 2.0.2.

Affected (1)

Products: Node Access Rebuild Progressive Project: Node Access Rebuild Progressive

Node Access Rebuild Progressive Project

1 product

Node Access Rebuild Progressive

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Node Access Rebuild Progressive Project Node Access Rebuild Progressive	Before 2.0.2

Related CWEs

CWE-282

Improper Ownership Management

The product assigns the wrong ownership, or does not properly verify the ownership, of an object or resource.

References (1)

https://www.drupal.org/sa-contrib-2024-010

Source: mlhess@drupal.org

Vendor Advisory

Timeline

No history available yet.