Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fh8c-mghq-6w46

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The File module in Drupal 7.x before 7.29 does not properly check permissions to view files, which allows remote authenticated users with certain permissions to bypass intended restrictions and read files by attaching the file to content with a file field.

The File module in Drupal 7.x before 7.29 does not properly check permissions to view files, which allows remote authenticated users with certain permissions to bypass intended restrictions and read files by attaching the file to content with a file field.

EPSS

Процентиль: 30%
0.00106
Низкий

Связанные уязвимости

ubuntu
почти 11 лет назад

The File module in Drupal 7.x before 7.29 does not properly check permissions to view files, which allows remote authenticated users with certain permissions to bypass intended restrictions and read files by attaching the file to content with a file field.

nvd
почти 11 лет назад

The File module in Drupal 7.x before 7.29 does not properly check permissions to view files, which allows remote authenticated users with certain permissions to bypass intended restrictions and read files by attaching the file to content with a file field.

debian
почти 11 лет назад

The File module in Drupal 7.x before 7.29 does not properly check perm ...

EPSS

Процентиль: 30%
0.00106
Низкий