CVE-2024-13251

Description

Incorrect Privilege Assignment vulnerability in Drupal Registration role allows Privilege Escalation.This issue affects Registration role: from 0.0.0 before 2.0.1.

Reserved 2025-01-09 | Published 2025-01-09 | Updated 2025-01-10 | Assigner drupal

Problem types

CWE-266 Incorrect Privilege Assignment

Product status

Default status
unaffected

0.0.0 before 2.0.1
affected

Credits

Pamela Barone finder

Renaud Joubert finder

Juraj Nemec remediation developer

Benjamin Melançon remediation developer

Juraj Nemec coordinator

Greg Knaddison coordinator

Drew Webber coordinator

References

www.drupal.org/sa-contrib-2024-015

cve.org (CVE-2024-13251)

nvd.nist.gov (CVE-2024-13251)

Download JSON