CVE-2024-13251

The Drupal Registration role module (versions 0.0.0 through 2.0.0 ) is vulnerable to an Incorrect Privilege Assignment flaw (CWE-266). The root cause is a logic error occurring on sites that updated their code but failed to run the standard Drupal update process (e.g., update.php). A remote attac...