CVE-2024-13251 Registration role - Critical - Access bypass - SA-CONTRIB-2024-015

Incorrect Privilege Assignment vulnerability in Drupal Registration role allows Privilege Escalation.This issue affects Registration role: from 0.0.0 before 2.0.1...

CVE-2024-13251

The Drupal Registration role module (versions 0.0.0 through 2.0.0 ) is vulnerable to an Incorrect Privilege Assignment flaw (CWE-266). The root cause is a logic error occurring on sites that updated their code but failed to run the standard Drupal update process (e.g., update.php). A remote attac...

CVE-2024-13251 Registration role - Critical - Access bypass - SA-CONTRIB-2024-015

Incorrect Privilege Assignment vulnerability in Drupal Registration role allows Privilege Escalation.This issue affects Registration role: from 0.0.0 before 2.0.1...

PT-2012-3388

Name of the Vulnerable Software and Affected Versions Drupal Registration Codes module versions prior to 6.x-2.4 Description The issue allows remote attackers to bypass intended registration restrictions due to a lack of access restriction to the registration code list. Recommendations For versio...