Miembros de
Boletines de Vulnerabilidades |
SA-2008-060 - Drupal core - Multiple vulnerabilities |
|
| Software afectado | Drupal |
|
Advisory ID: DRUPAL-SA-2008-060Project: Drupal coreVersions: 5.x and 6.xDate: 2008-October-8Security risk: CriticalExploitable from: RemoteVulnerability: Multiple vulnerabilitiesDescriptionMultiple vulnerabilities and weaknesses were discovered in Drupal.File upload access bypassA logic error in the core upload module validation allowed unprivileged users to attach files to content. This bug affects Drupal 6.x only.Users can view files attached to content which they do not otherwise have access More info: https://www.drupal.org/node/318706 |
|
