Project: 
Profile
Date: 
2020-February-19
Security risk: 
Moderately critical 14∕25 AC:Basic/A:User/CI:Some/II:Some/E:Theoretical/TD:All
Vulnerability: 
Access Bypass
Affected versions: 
1.0.0
Description: 

The Profile module enables you to allow users to have configurable user profiles.

The module doesn't sufficiently check access when creating a user profile. Users with the "create profiles" permission could create profiles for any users.

Solution: 

Install the latest version:

Also see the Profile project page.

Reported By: 
Fixed By: 
Coordinated By: