CVE-2024-13277: Smart IP Ban Project Smart IP Ban

Critical severity, CVSS 9.1. EPSS: 0.4% chance of exploitation in the next 30 days.

Incorrect Authorization vulnerability in Drupal Smart IP Ban allows Forceful Browsing.This issue affects Smart IP Ban: from 7.X-1.0 before 7.X-1.1.

Affected products

• Smart IP Ban Project Smart IP Ban: from 7.x-1.0, before 7.x-1.1 (fixed in 7.x-1.1)

Published 2025-01-09. Last modified 2026-06-17.