CVE-2024-13272

MEDIUM

Drupal Paragraphs <2.0.2 - Info Disclosure

Title source: llm
STIX 2.1

Description

Insufficient Granularity of Access Control vulnerability in Drupal Paragraphs table allows Content Spoofing.This issue affects Paragraphs table: from 0.0.0 before 1.23.0, from 2.0.0 before 2.0.2.

Scores

CVSS v3 6.3
EPSS 0.0009
EPSS Percentile 25.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-1220
Status published
Products (1)
paragraphs_table_project/paragraphs_table < 1.23.0
Published Jan 09, 2025
Tracked Since Feb 18, 2026