CVE-2024-13251 Registration role - Critical - Access bypass - SA-CONTRIB-2024-015

Incorrect Privilege Assignment vulnerability in Drupal Registration role allows Privilege Escalation.This issue affects Registration role: from 0.0.0 before 2.0.1...

CVE-2024-13251

The CVE-2024-13251 concerns the Drupal Registration role module. A logic/privilege-assignment error allows privilege escalation and affects Registration role versions 0.0.0 through 2.0.0, with the root cause linked to how upgrades and update.php handling were processed. The issue is mitigated by ...