The module doesn't sufficiently protect access to certain paths provided by the module. If you use the Smart IP Ban module for Drupal 7.x, upgrade to Smart IP Ban 7.x-1.1.

See Smart IP Ban - Critical - Access bypass - SA-CONTRIB-2024-042.

VCS Label
7.x-1.1
Core compatibility
Release type
Packaged Git sha1
61788eb034718763d6245bb5ef8c7e033f7f9aaa
Release files
6b4fcb5757873743db1b8cce9d19df43
Release file SHA-1 hash
969acf0d9f5c58c237ad678fc24656711ad2a945
Release file SHA-256 hash
e107c855d82c2516d086c28ece4428be88e26017f2c751440c50e21ec6897b10
9215f463d8c1919dae944c6049ba7e15
Release file SHA-1 hash
636a014cfd1d207dc4be049a47d8f3ffb248e53d
Release file SHA-256 hash
2a5d45f310801b97065d433f49ee3ae9cc74404a584a1b0ab2d05606c93bed4e