registration 7.x-1.9

Security update

Security release.

Sites that allow non-administrative users to manage registrations because the users can update the registration host entity and have "update own registration" permission for a given registration type, may need to give those users the "administer own registration" permission for them to retain the ability to manage registrations after installing this upgrade.

Resolves Entity Registration - Moderately critical - Access bypass - SA-CONTRIB-2022-063

Pages

Subscribe with RSS Subscribe to RSS - Security update