CVE-2024-13291
Incorrect Authorization vulnerability in Drupal Basic HTTP Authentication allows Forceful Browsing.This issue affects Basic HTTP Authentication: from 7.X-1.0 before 7.X-1.4.
More information : https://www.drupal.org/sa-contrib-2024-057
