« Volver al listado

CVE-2024-13272

Estado: AnalizadaMedia (6.3)—

Insufficient Granularity of Access Control vulnerability in Drupal Paragraphs table allows Content Spoofing.This issue affects Paragraphs table: from 0.0.0 before 1.23.0, from 2.0.0 before 2.0.2.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Paragraphs Table Project — Paragraphs Table

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-13272",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-13272",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-01-14T17:05:37.422960Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.3,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
          "integrityImpact": "LOW",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "LOW",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 3.4,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "mlhess@drupal.org",
      "affectedData": [
        {
          "repo": "https://git.drupalcode.org/project/paragraphs_table",
          "vendor": "Drupal",
          "product": "Paragraphs table",
          "versions": [
            {
              "status": "affected",
              "version": "0.0.0",
              "lessThan": "1.23.0",
              "versionType": "semver"
            },
            {
              "status": "affected",
              "version": "2.0.0",
              "lessThan": "2.0.2",
              "versionType": "semver"
            }
          ],
          "collectionURL": "https://www.drupal.org/project/paragraphs_table",
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2025-01-09T20:15:36.027",
  "references": [
    {
      "url": "https://www.drupal.org/sa-contrib-2024-036",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "mlhess@drupal.org"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "mlhess@drupal.org",
      "description": [
        {
          "lang": "en",
          "value": "CWE-1220"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Insufficient Granularity of Access Control vulnerability in Drupal Paragraphs table allows Content Spoofing.This issue affects Paragraphs table: from 0.0.0 before 1.23.0, from 2.0.0 before 2.0.2."
    },
    {
      "lang": "es",
      "value": "La vulnerabilidad de granularidad insuficiente del control de acceso en Drupal Paragraphs table permite la suplantación de contenido. Este problema afecta a Paragraphs table: desde 0.0.0 antes de 1.23.0, desde 2.0.0 antes de 2.0.2."
    }
  ],
  "lastModified": "2026-07-21T14:13:37.330",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:paragraphs_table_project:paragraphs_table:*:*:*:*:*:drupal:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0859B1C6-9B98-4A6E-97BE-29ECFE5955A1",
              "versionEndExcluding": "1.23"
            },
            {
              "criteria": "cpe:2.3:a:paragraphs_table_project:paragraphs_table:*:*:*:*:*:drupal:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9BB42090-0CE1-4DAC-8555-279AB88C1366",
              "versionEndExcluding": "2.0.2",
              "versionStartIncluding": "2.0.0"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "mlhess@drupal.org"
}