DRUPAL-CONTRIB-2024-017

See a problem?
Import Source
https://github.com/DrupalSecurityTeam/drupal-advisory-database/blob/main/advisories/advanced_pwa/DRUPAL-CONTRIB-2024-017.json
JSON Data
https://api.osv.dev/v1/vulns/DRUPAL-CONTRIB-2024-017
Aliases
  • CVE-2024-13253
Published
2024-04-24T13:16:40Z
Modified
2026-09-10T03:45:17Z
Summary
[none]
Details

Progressive web applications are web applications that load like regular web pages or websites but can offer the user functionality such as working offline, push notifications, and device hardware access traditionally available only to native applications.

This module doesn't sufficiently protect access to the settings form, allowing an unauthorized malicious user to view and modify the module settings.

References
Credits

Affected packages

Packagist:https://packages.drupal.org/8 / drupal/advanced_pwa

Package

Name
drupal/advanced_pwa
Purl
pkg:composer/drupal/advanced_pwa?repository_url=https:%2F%2Fpackages.drupal.org%2F8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.5.0
Database specific
Show details 
{
    "constraint": "<1.5.0"
}

Database specific

affected_versions 
"<1.5.0"
source 
"https://github.com/DrupalSecurityTeam/drupal-advisory-database/blob/main/advisories/advanced_pwa/DRUPAL-CONTRIB-2024-017.json"