Miembros de
Boletines de Vulnerabilidades |
Drupal core - Moderately critical - Access bypass - SA-CORE-2024-004 |
|
| Software afectado | Drupal |
|
Project: Drupal coreDate: 2024-November-20Security risk: Moderately critical 10 ∕ 25 AC:Basic/A:User/CI:None/II:Some/E:Theoretical/TD:DefaultVulnerability: Access bypassAffected versions: >= 8.0.0 = 10.3.0 = 11.0.0 Description: Drupals uniqueness checking for certain user fields is inconsistent depending on the database engine and its collation.As a result, a user may be able to register with the same email address as another user.This may lead to data integrity issues.Solution: More info: https://www.drupal.org/sa-core-2024-004 |
|
