Drupal Email Contact Module Insufficient Access Control Vulnerability Allowing Forceful Browsing

A vulnerability in the Drupal Email Contact module, versions 0.0.0 prior to 2.0.4, has been identified. This issue arises from insufficient granularity in access control, which allows for forceful browsing. Users may exploit this vulnerability to bypass restrictions and access content or features that should be limited or unavailable to them.

Impact

Exploitation of this vulnerability could lead to unauthorized access to restricted content or features, allowing users to browse areas of the site they should not have access to.