CVE-2024-13246

MEDIO 5.3CVE-2024-13246 · DRUPAL-CONTRIB-2024-010 · Published 09/01/2025 · updated 17/06/2026

In breve

CVE-2024-13246 è una vulnerabilità MEDIO (CVSS 5.3) che riguarda drupal/node_access_rebuild_progressive, node access rebuild progressive (node access rebuild progressive project).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.27%, superiore al 20.1% delle vulnerabilità.
Correzione: aggiornare a 2.0.2 o successiva.

Package	Affected versions	Patched versions
drupal/node_access_rebuild_progressive Packagist:https://packages.drupal.org/8	`< 2.0.2`	`2.0.2`
node access rebuild progressive node_access_rebuild_progressive_project	`< 2.0.2`	`2.0.2`

Description

This module provides an alternative mean of rebuilding the Content Access table.

The module doesn't sufficiently reset the state of content access when the module is uninstalled.

NVD description

Improper Ownership Management vulnerability in Drupal Node Access Rebuild Progressive allows Target Influence via Framing.This issue affects Node Access Rebuild Progressive: from 0.0.0 before 2.0.2.

References

drupal.org/sa-contrib-2024-010 · WEB

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free