Most recent entries from all

bdu:2025-00290

2026-10-09T07:28:01.015915+00:00

bdu:2025-00290

DRUPAL-CONTRIB-2024-015

2026-10-09T07:28:01.015959+00:00

Affected: Packagist:https://packages.drupal.org/8: drupal/registration_role

The Registration role module lets an administrator select a role (or multiple roles) to automatically assign to new users. The selected role (or roles) will be assigned to new registrants.

The module has a logic error when handling sites that upgraded code and did not run the Drupal update process (e.g. update.php).

This vulnerability is mitigated by the fact that the problem does not exist on sites that followed the process of updating code and running the standard updates.

EUVD-2026-210049

2026-10-09T07:28:01.015996+00:00

EUVD-2026-210049

fkie_cve-2024-13251

2026-10-09T07:28:01.016009+00:00

Incorrect Privilege Assignment vulnerability in Drupal Registration role allows Privilege Escalation.This issue affects Registration role: from 0.0.0 before 2.0.1.

GHSA-w3q9-jjpq-m527

2026-10-09T07:28:01.016030+00:00

Incorrect Privilege Assignment vulnerability in Drupal Registration role allows Privilege Escalation.This issue affects Registration role: from 0.0.0 before 2.0.1.

WID-SEC-W-2024-0570 — Drupal: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen

2026-10-09T07:28:01.016043+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Drupal ausnutzen, um Sicherheitsvorkehrungen zu umgehen.