[Security-news] Profile Private - Critical - Unsupported - SA-CONTRIB-2025-002

security-news at drupal.org security-news at drupal.org
Wed Jan 8 18:39:48 UTC 2025


View online: https://www.drupal.org/sa-contrib-2025-002

Project: Profile Private [1]
Date: 2025-January-08
Security risk: *Critical* 15 ∕ 25
AC:None/A:None/CI:Some/II:None/E:Theoretical/TD:All [2]
Vulnerability: Unsupported

Affected versions: *
Description: 
The security team is marking this project unsupported. There is a known
security issue with the project that has not been fixed by the maintainer. If
you would like to maintain this project, please read:
https://www.drupal.org/node/251466#s-becoming-owner-maintainer-or-co-mai...
[3]

Solution: 
If you use this project, you should uninstall it.  To take over
maintainership, please read
https://www.drupal.org/node/251466#s-becoming-owner-maintainer-or-co-mai...
[4]

Reported By: 
   * Dezső Biczó [5]

Coordinated By: 
   * Ivo Van Geertruyen [6] of the Drupal Security Team
   * Cathy Theys [7] of the Drupal Security Team
   * Greg Knaddison [8] of the Drupal Security Team


[1] https://www.drupal.org/project/profile_private
[2] https://www.drupal.org/security-team/risk-levels
[3]
https://www.drupal.org/node/251466#s-becoming-owner-maintainer-or-co-maintainer-of-a-project-that-is-unsupported-for-security-reasons
[4]
https://www.drupal.org/node/251466#s-becoming-owner-maintainer-or-co-maintainer-of-a-project-that-is-unsupported-for-security-reasons
[5] https://security.drupal.org/user/86953
[6] https://www.drupal.org/u/mrbaileys
[7] https://www.drupal.org/u/yesct
[8] https://security.drupal.org/user/27



More information about the Security-news mailing list