Логотип exploitDog
bind:CVE-2017-6377
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2017-6377

Количество 4

Количество 4

ubuntu логотип

CVE-2017-6377

больше 8 лет назад

When adding a private file via the editor in Drupal 8.2.x before 8.2.7, the editor will not correctly check access for the file being attached, resulting in an access bypass.

CVSS3: 7.5
EPSS: Низкий
nvd логотип

CVE-2017-6377

больше 8 лет назад

When adding a private file via the editor in Drupal 8.2.x before 8.2.7, the editor will not correctly check access for the file being attached, resulting in an access bypass.

CVSS3: 7.5
EPSS: Низкий
debian логотип

CVE-2017-6377

больше 8 лет назад

When adding a private file via the editor in Drupal 8.2.x before 8.2.7 ...

CVSS3: 7.5
EPSS: Низкий
github логотип

GHSA-w7qx-vwr9-2j3r

около 3 лет назад

Drupal editor module incorrectly checks access to inline private files

CVSS3: 7.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2017-6377

When adding a private file via the editor in Drupal 8.2.x before 8.2.7, the editor will not correctly check access for the file being attached, resulting in an access bypass.

CVSS3: 7.5
0%
Низкий
больше 8 лет назад
nvd логотип
CVE-2017-6377

When adding a private file via the editor in Drupal 8.2.x before 8.2.7, the editor will not correctly check access for the file being attached, resulting in an access bypass.

CVSS3: 7.5
0%
Низкий
больше 8 лет назад
debian логотип
CVE-2017-6377

When adding a private file via the editor in Drupal 8.2.x before 8.2.7 ...

CVSS3: 7.5
0%
Низкий
больше 8 лет назад
github логотип
GHSA-w7qx-vwr9-2j3r

Drupal editor module incorrectly checks access to inline private files

CVSS3: 7.5
0%
Низкий
около 3 лет назад

Уязвимостей на страницу