GitHub Advisoryadvisory · Packagist

GHSA-q3p9-8728-wq7x Drupal saving user accounts can sometimes grant the user all roles

HIGH Published 2022-05-17 Modified 2024-04-23 Official page ↗
Aliases
CVE-2016-3169
Ecosystem
Packagist
Packages
drupal/core, drupal/drupal
Severity
High
CVSS vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-269
Reviewed
2024-04-23

Affected packages

• Packagist drupal/core: >= 6.0, < 6.38 → fixed in 6.38 • Packagist drupal/core: >= 7.0, < 7.43 → fixed in 7.43 • Packagist drupal/drupal: >= 7.0, < 7.43 → fixed in 7.43 • Packagist drupal/drupal: >= 6.0, < 6.38 → fixed in 6.38

Description

The User module in Drupal 6.x before 6.38 and 7.x before 7.43 allows remote attackers to gain privileges by leveraging contributed or custom code that calls the user_save function with an explicit category and loads all roles into the array.

Related

Alias · CVE (1)

  • CVE-2016-3169 The User module in Drupal 6.x before 6.38 and 7.x before 7.43 allows remote attackers to gain privileges by leveraging contributed or… vulnerability

Weakness · CWE (1)

  • CWE-269 Improper Privilege Management weakness

References