Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fh8c-mghq-6w46

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The File module in Drupal 7.x before 7.29 does not properly check permissions to view files, which allows remote authenticated users with certain permissions to bypass intended restrictions and read files by attaching the file to content with a file field.

The File module in Drupal 7.x before 7.29 does not properly check permissions to view files, which allows remote authenticated users with certain permissions to bypass intended restrictions and read files by attaching the file to content with a file field.

EPSS

Процентиль: 31%
0.00115
Низкий

Связанные уязвимости

ubuntu
около 11 лет назад

The File module in Drupal 7.x before 7.29 does not properly check permissions to view files, which allows remote authenticated users with certain permissions to bypass intended restrictions and read files by attaching the file to content with a file field.

nvd
около 11 лет назад

The File module in Drupal 7.x before 7.29 does not properly check permissions to view files, which allows remote authenticated users with certain permissions to bypass intended restrictions and read files by attaching the file to content with a file field.

debian
около 11 лет назад

The File module in Drupal 7.x before 7.29 does not properly check perm ...

EPSS

Процентиль: 31%
0.00115
Низкий