VDB
Sign up
—

DRUPAL-CORE-2024-004

Quick fix

DRUPAL-CORE-2024-004 — drupal/core: upgrade to the fixed version with the command below.

composer require drupal/core:^10.2.11

Details

Drupal's uniqueness checking for certain user fields is inconsistent depending on the database engine and its collation.

As a result, a user may be able to register with the same email address as another user.

This may lead to data integrity issues.

Are you affected?

Enter the version of the package you're using.

Affected packages

Packagist/drupal/core
Introduced in: 8.0.0Fixed in: 10.2.11
Fixcomposer require drupal/core:^10.2.11

References