CVE-2024-13251

The Drupal Registration role module (versions 0.0.0 through 2.0.0 ) is vulnerable to an Incorrect Privilege Assignment flaw (CWE-266). The root cause is a logic error occurring on sites that updated their code but failed to run the standard Drupal update process (e.g., update.php). A remote attac...

CVE-2024-13251 Registration role - Critical - Access bypass - SA-CONTRIB-2024-015

Incorrect Privilege Assignment vulnerability in Drupal Registration role allows Privilege Escalation.This issue affects Registration role: from 0.0.0 before 2.0.1...