Read the docs

User Read-only Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

User Read-only Project records in CISA KEV

No User Read-only Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record in User Readonly · all components

Priority LOW 20

The User Read-Only module 6.x-1.x before 6.x-1.4 and 7.x-1.x before 7.x-1.4 for Drupal, does not properly assign roles when there are more than three roles on the site and certain unspecified configurations, which might…

CVSS 2.0LOW 3.6 Network Low privileges Interaction — EPSS 0.01433 Published 2012-12-03 No fix listed CWE-264
Open these records in search →