CVE-2026-0945
Role Delegation - Moderately critical - Access bypass - SA-CONTRIB-2026-002
Résumé
Role Delegation - Moderately critical - Access bypass - SA-CONTRIB-2026-002
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Privilege Defined With Unsafe Actions vulnerability in Drupal Role Delegation allows Privilege Escalation.This issue affects Role Delegation: from 1.3.0 before 1.5.0.
Paquets affectés
Packagist:https://packages.drupal.org/8
drupal/role_delegation
[{"type":"ECOSYSTEM","events":[{"introduced":"1.3.0"},{"fixed":"1.5.0"}],"database_specific":{"constraint":">=1.3.0 <1.5.0"}}]
Références
- advisory github.com
- advisory nvd.nist.gov
- web drupal.org
- web git.drupalcode.org
- web drupal.org