Skip to content
OpenAdvisories
High · 8.8 CVE-2024-13251 DRUPAL-CONTRIB-2024-015EUVD-2024-51465GHSA-w3q9-jjpq-m527

Registration role - Critical - Access bypass - SA-CONTRIB-2024-015

Published Jan 9, 2025 · Updated Jan 10, 2025 · Assigned by drupal

Description

Incorrect Privilege Assignment vulnerability in Drupal Registration role allows Privilege Escalation.This issue affects Registration role: from 0.0.0 before 2.0.1.

Affected products

VendorProductAffectedFixed
Drupal Registration role 0.0.0 – < 2.0.1 2.0.1

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/registration_role < 2.0.1 2.0.1 DRUPAL-CONTRIB-2024-015

Advisories 1

References