Vulnerability Bulletins |
SA-2008-060 - Drupal core - Multiple vulnerabilities |
|
| Affected software | Drupal |
|
Advisory ID: DRUPAL-SA-2008-060Project: Drupal coreVersions: 5.x and 6.xDate: 2008-October-8Security risk: CriticalExploitable from: RemoteVulnerability: Multiple vulnerabilitiesDescriptionMultiple vulnerabilities and weaknesses were discovered in Drupal.File upload access bypassA logic error in the core upload module validation allowed unprivileged users to attach files to content. This bug affects Drupal 6.x only.Users can view files attached to content which they do not otherwise have access More info: https://www.drupal.org/node/318706 |
|