Skip to content
CVE PROGRAM SOURCE RECORD9.1 Critical

CVE-2024-13253

Advanced PWA - Critical - Access bypass - SA-CONTRIB-2024-017

Description

Incorrect Authorization vulnerability in Drupal Advanced PWA inc Push Notifications allows Forceful Browsing.This issue affects Advanced PWA inc Push Notifications: from 0.0.0 before 1.5.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Drupal Advanced PWA inc Push Notifications

Default version status: unaffected

  • 0.0.0 to < 1.5.0affected

References