PT-2020-23048 · Packagist · Drupal/Profile

Published

2020-02-19

·

Updated

2020-02-19

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
The Profile module enables you to allow users to have configurable user profiles.
The module doesn't sufficiently check access when creating a user profile. Users with the "create profiles" permission could create profiles for any users.
Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

DRUPAL-CONTRIB-2020-004

Affected Products

Drupal/Profile