Description
Incorrect Authorization vulnerability in Drupal Drupal REST & JSON API Authentication allows Forceful Browsing.This issue affects Drupal REST & JSON API Authentication: from 0.0.0 before 2.0.13.
Published: 2025-01-09
Score: 9.8 Critical
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2024-51472 Incorrect Authorization vulnerability in Drupal Drupal REST & JSON API Authentication allows Forceful Browsing.This issue affects Drupal REST & JSON API Authentication: from 0.0.0 before 2.0.13.
References
Link Providers
https://www.drupal.org/sa-contrib-2024-022 cve-icon cve-icon
History

Wed, 04 Jun 2025 16:00:00 +0000

Type Values Removed Values Added
First Time appeared Rest \& Json Api Authentication Project
Rest \& Json Api Authentication Project rest \& Json Api Authentication
CPEs cpe:2.3:a:rest_\&_json_api_authentication_project:rest_\&_json_api_authentication:*:*:*:*:*:drupal:*:*
Vendors & Products Rest \& Json Api Authentication Project
Rest \& Json Api Authentication Project rest \& Json Api Authentication

Fri, 10 Jan 2025 17:15:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Thu, 09 Jan 2025 19:15:00 +0000

Type Values Removed Values Added
Description Incorrect Authorization vulnerability in Drupal Drupal REST & JSON API Authentication allows Forceful Browsing.This issue affects Drupal REST & JSON API Authentication: from 0.0.0 before 2.0.13.
Title Drupal REST & JSON API Authentication - Moderately critical - Access bypass - SA-CONTRIB-2024-022
Weaknesses CWE-863
References

Subscriptions

Rest \& Json Api Authentication Project Rest \& Json Api Authentication
cve-icon MITRE

Status: PUBLISHED

Assigner: drupal

Published:

Updated: 2025-01-10T16:46:12.472Z

Reserved: 2025-01-09T18:27:53.572Z

Link: CVE-2024-13258

cve-icon Vulnrichment

Updated: 2025-01-10T16:46:06.000Z

cve-icon NVD

Status : Analyzed

Published: 2025-01-09T19:15:19.887

Modified: 2025-06-04T15:11:56.670

Link: CVE-2024-13258

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses