Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fh8c-mghq-6w46

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The File module in Drupal 7.x before 7.29 does not properly check permissions to view files, which allows remote authenticated users with certain permissions to bypass intended restrictions and read files by attaching the file to content with a file field.

The File module in Drupal 7.x before 7.29 does not properly check permissions to view files, which allows remote authenticated users with certain permissions to bypass intended restrictions and read files by attaching the file to content with a file field.

EPSS

Процентиль: 68%
0.01323
Низкий

Связанные уязвимости

ubuntu
около 12 лет назад

The File module in Drupal 7.x before 7.29 does not properly check permissions to view files, which allows remote authenticated users with certain permissions to bypass intended restrictions and read files by attaching the file to content with a file field.

nvd
около 12 лет назад

The File module in Drupal 7.x before 7.29 does not properly check permissions to view files, which allows remote authenticated users with certain permissions to bypass intended restrictions and read files by attaching the file to content with a file field.

debian
около 12 лет назад

The File module in Drupal 7.x before 7.29 does not properly check perm ...

EPSS

Процентиль: 68%
0.01323
Низкий