Логотип exploitDog
bind:CVE-2023-31250
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2023-31250

Количество 4

Количество 4

ubuntu логотип

CVE-2023-31250

около 2 лет назад

The file download facility doesn't sufficiently sanitize file paths in certain situations. This may result in users gaining access to private files that they should not have access to. Some sites may require configuration changes following this security release. Review the release notes for your Drupal version if you have issues accessing private files after updating.

CVSS3: 6.5
EPSS: Низкий
nvd логотип

CVE-2023-31250

около 2 лет назад

The file download facility doesn't sufficiently sanitize file paths in certain situations. This may result in users gaining access to private files that they should not have access to. Some sites may require configuration changes following this security release. Review the release notes for your Drupal version if you have issues accessing private files after updating.

CVSS3: 6.5
EPSS: Низкий
debian логотип

CVE-2023-31250

около 2 лет назад

The file download facility doesn't sufficiently sanitize file paths in ...

CVSS3: 6.5
EPSS: Низкий
github логотип

GHSA-8849-cv9f-vccm

около 2 лет назад

Access bypass in Drupal core

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2023-31250

The file download facility doesn't sufficiently sanitize file paths in certain situations. This may result in users gaining access to private files that they should not have access to. Some sites may require configuration changes following this security release. Review the release notes for your Drupal version if you have issues accessing private files after updating.

CVSS3: 6.5
0%
Низкий
около 2 лет назад
nvd логотип
CVE-2023-31250

The file download facility doesn't sufficiently sanitize file paths in certain situations. This may result in users gaining access to private files that they should not have access to. Some sites may require configuration changes following this security release. Review the release notes for your Drupal version if you have issues accessing private files after updating.

CVSS3: 6.5
0%
Низкий
около 2 лет назад
debian логотип
CVE-2023-31250

The file download facility doesn't sufficiently sanitize file paths in ...

CVSS3: 6.5
0%
Низкий
около 2 лет назад
github логотип
GHSA-8849-cv9f-vccm

Access bypass in Drupal core

0%
Низкий
около 2 лет назад

Уязвимостей на страницу