PT-2014-8856
CVE-2014-9156
·
تاريخ النشر
2014-12-01
·
تاريخ التحديث
2014-12-01
الوصف من
CVSS 2.0
4.0
متوسطةالمقاييسAV:N/AC:L/Au:S/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
FileField module versions 6.x-3.x before 6.x-3.13
Description
The issue allows remote authenticated users with permission to create or edit content to read private files by attaching an uploaded file, due to improper permission checks to view files.
Recommendations
For FileField module versions 6.x-3.x before 6.x-3.13, update to version 6.x-3.13 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾