{"vulnerability": "cve-2024-1325", "sightings": [{"uuid": "bf12e204-c283-4879-ba24-9f5ef91b0a57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13256", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113799986024892307", "content": "", "creation_timestamp": "2025-01-09T19:13:02.593055Z"}, {"uuid": "0735ed0a-9455-4ae2-a1af-be3cb77fa848", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13258", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdfcdl3jk2l", "content": "", "creation_timestamp": "2025-01-09T19:16:28.147777Z"}, {"uuid": "83806581-9f70-4ff0-a7de-44576c3a6527", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13257", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113799986039874968", "content": "", "creation_timestamp": "2025-01-09T19:13:02.708245Z"}, {"uuid": "2b05fcb9-e1e8-44bf-8934-2137011b6f33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13259", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113799986068466806", "content": "", "creation_timestamp": "2025-01-09T19:13:03.610021Z"}, {"uuid": "3bd72a73-7306-45e6-afbf-f559e64940fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13258", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113799986053818546", "content": "", "creation_timestamp": "2025-01-09T19:13:03.704745Z"}, {"uuid": "25e73f4f-af06-4d7d-8325-d41e6a6dea18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13259", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdfcfszjb27", "content": "", "creation_timestamp": "2025-01-09T19:16:30.626733Z"}, {"uuid": "7c6a164d-fd92-4474-b7f8-5e198bd0ee37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13256", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdfc6krkk25", "content": "", "creation_timestamp": "2025-01-09T19:16:22.967669Z"}, {"uuid": "615ba420-a775-4067-b030-e6f26795f92b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13253", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdfbwqneb22", "content": "", "creation_timestamp": "2025-01-09T19:16:14.744480Z"}, {"uuid": "73fe7e8e-4962-4efb-9392-ea0b1bea908f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13250", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdfbpnrqj2f", "content": "", "creation_timestamp": "2025-01-09T19:16:07.317935Z"}, {"uuid": "df900823-30ec-4267-81fc-1af07ed44c7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13251", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdfbrvuv722", "content": "", "creation_timestamp": "2025-01-09T19:16:09.662148Z"}, {"uuid": "a474c607-2675-4797-adcd-0c42e3b4594b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13252", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdfbuckcv2k", "content": "", "creation_timestamp": "2025-01-09T19:16:12.131952Z"}, {"uuid": "74e370f3-a3a5-45e3-b86d-fe365bae9abb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13254", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdfbzmtd42f", "content": "", "creation_timestamp": "2025-01-09T19:16:17.746692Z"}, {"uuid": "0c6b266b-0c54-4b02-bf45-7e67438c56d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13255", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdfc44fne2a", "content": "", "creation_timestamp": "2025-01-09T19:16:20.316131Z"}, {"uuid": "e82fafc8-2d6b-4c17-91b2-37fbb3fd868a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13257", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdfcb3wkj27", "content": "", "creation_timestamp": "2025-01-09T19:16:25.556745Z"}, {"uuid": "d31086e1-8965-4748-9d99-7b77a9bb9510", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13250", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfdgk73o242b", "content": "", "creation_timestamp": "2025-01-09T19:38:45.904100Z"}, {"uuid": "c6e8d29d-4a30-4445-b294-50b9c8bb7ed3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13253", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfdgk7shna2h", "content": "", "creation_timestamp": "2025-01-09T19:38:48.556431Z"}, {"uuid": "af03c4cc-a466-412b-a204-3447f665fde9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13254", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfdgkak2ea2e", "content": "", "creation_timestamp": "2025-01-09T19:38:52.150616Z"}, {"uuid": "b3a2cd29-91c8-431f-a0cf-1ef2604abd23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13256", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfdgk7ovco2e", "content": "", "creation_timestamp": "2025-01-09T19:38:48.069303Z"}, {"uuid": "f7258061-8275-47de-a16e-e37361d19aae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13257", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfdgkade7h2k", "content": "", "creation_timestamp": "2025-01-09T19:38:51.104289Z"}, {"uuid": "fe58e531-6562-4d00-8d8c-6a06c4146bbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13258", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfdgkauqvi2w", "content": "", "creation_timestamp": "2025-01-09T19:38:53.691660Z"}, {"uuid": "27ee5664-3b97-4d93-87f9-755c0107b2bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13252", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfdgkagqm72k", "content": "", "creation_timestamp": "2025-01-09T19:38:51.641009Z"}, {"uuid": "5f8e986b-2a1a-47b7-9c19-5efe3a7acf24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13251", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfdgka4cjw2q", "content": "", "creation_timestamp": "2025-01-09T19:38:50.046893Z"}, {"uuid": "c47e41af-8521-4e51-b074-076b07b90aa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13259", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfdgkardhx2k", "content": "", "creation_timestamp": "2025-01-09T19:38:53.157316Z"}, {"uuid": "141f6dfb-9573-4c6b-8603-7348e99404c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13255", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfdgkaya7y2w", "content": "", "creation_timestamp": "2025-01-09T19:38:54.141880Z"}, {"uuid": "f9a765ae-f0fc-413d-aa80-78ab9f5adb9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13251", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113805316675395599", "content": "", "creation_timestamp": "2025-01-10T17:48:54.353227Z"}, {"uuid": "09bad3ec-0ef5-4f5e-94ea-669d3175bd9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13258", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113805316847032256", "content": "", "creation_timestamp": "2025-01-10T17:48:58.737344Z"}, {"uuid": "7e79ab99-ec20-4232-9932-65f1d2477e0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13253", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113805316779208716", "content": "", "creation_timestamp": "2025-01-10T17:48:58.922242Z"}, {"uuid": "938c76e5-73ee-4974-bcdd-fc3fbed9eff2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13254", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1025", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13254\n\ud83d\udd39 Description: Insertion of Sensitive Information Into Sent Data vulnerability in Drupal REST Views allows Forceful Browsing.This issue affects REST Views: from 0.0.0 before 3.0.1.\n\ud83d\udccf Published: 2025-01-09T18:59:46.386Z\n\ud83d\udccf Modified: 2025-01-09T18:59:46.386Z\n\ud83d\udd17 References:\n1. https://www.drupal.org/sa-contrib-2024-018", "creation_timestamp": "2025-01-09T19:16:54.000000Z"}, {"uuid": "ba1eb90e-f79a-4929-a641-bf91a78575c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13255", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1024", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13255\n\ud83d\udd39 Description: Exposure of Sensitive Information Through Data Queries vulnerability in Drupal RESTful Web Services allows Forceful Browsing.This issue affects RESTful Web Services: from 7.X-2.0 before 7.X-2.10.\n\ud83d\udccf Published: 2025-01-09T19:00:43.339Z\n\ud83d\udccf Modified: 2025-01-09T19:00:43.339Z\n\ud83d\udd17 References:\n1. https://www.drupal.org/sa-contrib-2024-019", "creation_timestamp": "2025-01-09T19:16:31.000000Z"}, {"uuid": "0bcde775-a9dc-416d-9f26-9d04e45c5881", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13256", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1023", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13256\n\ud83d\udd39 Description: Insufficient Granularity of Access Control vulnerability in Drupal Email Contact allows Forceful Browsing.This issue affects Email Contact: from 0.0.0 before 2.0.4.\n\ud83d\udccf Published: 2025-01-09T19:03:47.618Z\n\ud83d\udccf Modified: 2025-01-09T19:03:47.618Z\n\ud83d\udd17 References:\n1. https://www.drupal.org/sa-contrib-2024-020", "creation_timestamp": "2025-01-09T19:16:03.000000Z"}, {"uuid": "d304a5f2-088d-4724-96a2-b2c0cdf15f6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13259", "type": "seen", "source": "https://t.me/cvedetector/14889", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13259 - \"Drupal Image Sizes Sensitive Information Insertion Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-13259 \nPublished : Jan. 9, 2025, 7:15 p.m. | 35\u00a0minutes ago \nDescription : Insertion of Sensitive Information Into Sent Data vulnerability in Drupal Image Sizes allows Forceful Browsing.This issue affects Image Sizes: from 0.0.0 before 3.0.2. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T21:06:57.000000Z"}, {"uuid": "048d5f55-e25b-45c7-9b3a-9eac0632a521", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13258", "type": "seen", "source": "https://t.me/cvedetector/14888", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13258 - \"Drupal JSON API Unauthorized Access\"\", \n  \"Content\": \"CVE ID : CVE-2024-13258 \nPublished : Jan. 9, 2025, 7:15 p.m. | 35\u00a0minutes ago \nDescription : Incorrect Authorization vulnerability in Drupal Drupal REST & JSON API Authentication allows Forceful Browsing.This issue affects Drupal REST & JSON API Authentication: from 0.0.0 before 2.0.13. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T21:06:56.000000Z"}, {"uuid": "01313ff3-019c-4d2b-83fa-32e85da5aec8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13257", "type": "seen", "source": "https://t.me/cvedetector/14887", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13257 - Drupal Commerce Denial of Service (DoS)\", \n  \"Content\": \"CVE ID : CVE-2024-13257 \nPublished : Jan. 9, 2025, 7:15 p.m. | 35\u00a0minutes ago \nDescription : Incorrect Authorization vulnerability in Drupal Commerce View Receipt allows Forceful Browsing.This issue affects Commerce View Receipt: from 0.0.0 before 1.0.3. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T21:06:56.000000Z"}, {"uuid": "1d4ce23c-3cde-45eb-98bb-58ed07975c23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13256", "type": "seen", "source": "https://t.me/cvedetector/14886", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13256 - Drupal Email Contact Access Bypass Weakness\", \n  \"Content\": \"CVE ID : CVE-2024-13256 \nPublished : Jan. 9, 2025, 7:15 p.m. | 35\u00a0minutes ago \nDescription : Insufficient Granularity of Access Control vulnerability in Drupal Email Contact allows Forceful Browsing.This issue affects Email Contact: from 0.0.0 before 2.0.4. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T21:06:55.000000Z"}, {"uuid": "8b8f4490-315e-481e-891e-b34a857c2603", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13255", "type": "seen", "source": "https://t.me/cvedetector/14885", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13255 - Drupal RESTful Web Services Sensitive Information Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-13255 \nPublished : Jan. 9, 2025, 7:15 p.m. | 35\u00a0minutes ago \nDescription : Exposure of Sensitive Information Through Data Queries vulnerability in Drupal RESTful Web Services allows Forceful Browsing.This issue affects RESTful Web Services: from 7.X-2.0 before 7.X-2.10. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T21:06:51.000000Z"}, {"uuid": "fc7bf77c-b68e-4b26-9245-a653260d9993", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13251", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1028", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13251\n\ud83d\udd39 Description: Incorrect Privilege Assignment vulnerability in Drupal Registration role allows Privilege Escalation.This issue affects Registration role: from 0.0.0 before 2.0.1.\n\ud83d\udccf Published: 2025-01-09T18:58:16.356Z\n\ud83d\udccf Modified: 2025-01-09T18:58:16.356Z\n\ud83d\udd17 References:\n1. https://www.drupal.org/sa-contrib-2024-015", "creation_timestamp": "2025-01-09T19:17:54.000000Z"}, {"uuid": "cd57ef9a-a143-431f-95ae-1b81f20fd2fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13259", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1019", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13259\n\ud83d\udd39 Description: Insertion of Sensitive Information Into Sent Data vulnerability in Drupal Image Sizes allows Forceful Browsing.This issue affects Image Sizes: from 0.0.0 before 3.0.2.\n\ud83d\udccf Published: 2025-01-09T19:11:25.339Z\n\ud83d\udccf Modified: 2025-01-09T19:11:25.339Z\n\ud83d\udd17 References:\n1. https://www.drupal.org/sa-contrib-2024-023", "creation_timestamp": "2025-01-09T19:15:03.000000Z"}, {"uuid": "a25d24df-4974-421b-8538-b6affc457d22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13257", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1022", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13257\n\ud83d\udd39 Description: Incorrect Authorization vulnerability in Drupal Commerce View Receipt allows Forceful Browsing.This issue affects Commerce View Receipt: from 0.0.0 before 1.0.3.\n\ud83d\udccf Published: 2025-01-09T19:04:57.424Z\n\ud83d\udccf Modified: 2025-01-09T19:04:57.424Z\n\ud83d\udd17 References:\n1. https://www.drupal.org/sa-contrib-2024-021", "creation_timestamp": "2025-01-09T19:15:42.000000Z"}, {"uuid": "fd439d89-e70a-4cba-ac66-a0469f0adab1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13258", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1021", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13258\n\ud83d\udd39 Description: Incorrect Authorization vulnerability in Drupal Drupal REST & JSON API Authentication allows Forceful Browsing.This issue affects Drupal REST & JSON API Authentication: from 0.0.0 before 2.0.13.\n\ud83d\udccf Published: 2025-01-09T19:05:29.925Z\n\ud83d\udccf Modified: 2025-01-09T19:05:29.925Z\n\ud83d\udd17 References:\n1. https://www.drupal.org/sa-contrib-2024-022", "creation_timestamp": "2025-01-09T19:15:31.000000Z"}, {"uuid": "1426c358-40dc-4f19-8616-8dc32a14c696", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13250", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1029", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13250\n\ud83d\udd39 Description: Cross-Site Request Forgery (CSRF) vulnerability in Drupal Drupal Symfony Mailer Lite allows Cross Site Request Forgery.This issue affects Drupal Symfony Mailer Lite: from 0.0.0 before 1.0.6.\n\ud83d\udccf Published: 2025-01-09T18:57:50.019Z\n\ud83d\udccf Modified: 2025-01-09T18:57:50.019Z\n\ud83d\udd17 References:\n1. https://www.drupal.org/sa-contrib-2024-014", "creation_timestamp": "2025-01-09T19:18:08.000000Z"}, {"uuid": "9ad559ca-7264-424c-83f4-6d78e7e9ddb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13252", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1027", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13252\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal TacJS allows Cross-Site Scripting (XSS).This issue affects TacJS: from 0.0.0 before 6.5.0.\n\ud83d\udccf Published: 2025-01-09T18:58:53.806Z\n\ud83d\udccf Modified: 2025-01-09T18:58:53.806Z\n\ud83d\udd17 References:\n1. https://www.drupal.org/sa-contrib-2024-016", "creation_timestamp": "2025-01-09T19:17:30.000000Z"}, {"uuid": "6c6bb277-40fc-42b3-95dd-ba6511dc2e70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13253", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1026", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13253\n\ud83d\udd39 Description: Incorrect Authorization vulnerability in Drupal Advanced PWA inc Push Notifications allows Forceful Browsing.This issue affects Advanced PWA inc Push Notifications: from 0.0.0 before 1.5.0.\n\ud83d\udccf Published: 2025-01-09T18:59:22.054Z\n\ud83d\udccf Modified: 2025-01-09T18:59:22.054Z\n\ud83d\udd17 References:\n1. https://www.drupal.org/sa-contrib-2024-017", "creation_timestamp": "2025-01-09T19:17:09.000000Z"}, {"uuid": "f2cb9c1a-0c7e-47e8-a3c9-b85ab9bf8843", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13250", "type": "seen", "source": "https://t.me/cvedetector/14899", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13250 - Drupal Symfony Mailer Lite CSRF\", \n  \"Content\": \"CVE ID : CVE-2024-13250 \nPublished : Jan. 9, 2025, 7:15 p.m. | 35\u00a0minutes ago \nDescription : Cross-Site Request Forgery (CSRF) vulnerability in Drupal Drupal Symfony Mailer Lite allows Cross Site Request Forgery.This issue affects Drupal Symfony Mailer Lite: from 0.0.0 before 1.0.6. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T21:07:12.000000Z"}, {"uuid": "18899566-d014-45ab-9879-57c552a2b4df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13252", "type": "seen", "source": "https://t.me/cvedetector/14891", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13252 - Drupal TacJS Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-13252 \nPublished : Jan. 9, 2025, 7:15 p.m. | 35\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal TacJS allows Cross-Site Scripting (XSS).This issue affects TacJS: from 0.0.0 before 6.5.0. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T21:07:01.000000Z"}, {"uuid": "267738f6-5b39-4f7f-9798-beb50314125f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13251", "type": "seen", "source": "https://t.me/cvedetector/14890", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13251 - Drupal Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13251 \nPublished : Jan. 9, 2025, 7:15 p.m. | 35\u00a0minutes ago \nDescription : Incorrect Privilege Assignment vulnerability in Drupal Registration role allows Privilege Escalation.This issue affects Registration role: from 0.0.0 before 2.0.1. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T21:06:58.000000Z"}, {"uuid": "37cb3def-e542-466a-88f1-858ac6e56d0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13254", "type": "seen", "source": "https://t.me/cvedetector/14884", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13254 - Drupal REST Views Sensitive Information Insertion\", \n  \"Content\": \"CVE ID : CVE-2024-13254 \nPublished : Jan. 9, 2025, 7:15 p.m. | 35\u00a0minutes ago \nDescription : Insertion of Sensitive Information Into Sent Data vulnerability in Drupal REST Views allows Forceful Browsing.This issue affects REST Views: from 0.0.0 before 3.0.1. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T21:06:50.000000Z"}, {"uuid": "1965129e-e133-4615-b7e9-5fb9d706e4fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13253", "type": "seen", "source": "https://t.me/cvedetector/14883", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13253 - Drupal Advanced PWA inc Push Notifications Authorization Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-13253 \nPublished : Jan. 9, 2025, 7:15 p.m. | 35\u00a0minutes ago \nDescription : Incorrect Authorization vulnerability in Drupal Advanced PWA inc Push Notifications allows Forceful Browsing.This issue affects Advanced PWA inc Push Notifications: from 0.0.0 before 1.5.0. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T21:06:49.000000Z"}]}