DRUPAL-CONTRIB-2020-004
No score
The Profile module enables you to allow users to have configurable user profiles.
The module doesn't sufficiently check access when creating a user profile. Users with the "create profiles" permission could create profiles for any users.
What each source reports
OSVNo score
The Profile module enables you to allow users to have configurable user profiles.
The module doesn't sufficiently check access when creating a user profile. Users with the "create profiles" permission could create profiles for any users.
- Record
DRUPAL-CONTRIB-2020-004- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
drupal/profilePackagist:https://packages.drupal.org/8 | 1.0.0 to 1.0.0 | None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
DRUPAL-CONTRIB-2020-004 is a vulnerability with no CVSS score yet in drupal/profile, published February 19, 2020. No source lists public exploit code. No source names a fixed version.