Lucene search

K
osvGoogleOSV:GHSA-FRQF-9QR4-6VXF
HistoryMay 17, 2022 - 3:39 a.m.

Drupal Saving user accounts can sometimes grant the user all roles

2022-05-1703:39:45
Google
osv.dev
2

6.8 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

59.1%

The User module in Drupal 7.x before 7.44 allows remote authenticated users to gain privileges via vectors involving contributed or custom code that triggers a rebuild of the user profile form.

6.8 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

59.1%