{
  "affected": [
    {
      "database_specific": {
        "affected_versions": "\u003c2.8.0"
      },
      "package": {
        "ecosystem": "Packagist:https://packages.drupal.org/8",
        "name": "drupal/multiple_registration"
      },
      "ranges": [
        {
          "database_specific": {
            "constraint": "\u003c2.8.0"
          },
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.8.0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "severity": []
    }
  ],
  "aliases": [],
  "credits": [
    {
      "contact": [
        "https://www.drupal.org/user/415095"
      ],
      "name": "iswilson"
    }
  ],
  "details": "This module enables you to use special routes for user registration with special roles and custom field sets defined for the role.\n\nThe module doesn\u0027t sufficiently check which user roles can be registered under the scenario when the user tries to register the user with the administrator role.\n\nThis vulnerability is mitigated on sites where account approval is required as the user starts as blocked but still gets the \"Administrator\" role.",
  "id": "DRUPAL-CONTRIB-2019-048",
  "modified": "2023-08-11T18:36:19.000Z",
  "published": "2019-05-15T17:13:59.000Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://www.drupal.org/sa-contrib-2019-048"
    }
  ],
  "schema_version": "1.7.0"
}