PT-2022-38342 · Packagist · Drupal/Fancy File Delete

Published

2022-02-09

·

Updated

2022-02-09

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
This module enables you to manage and delete files.
The module doesn't sufficiently protect unmanaged files from view under the scenario unauthenticated user knows path to visit the view and can attempt to delete files which results in duplicate files being created.
To mitigate this issue without deploying code, review all views that are based on Fancy File Delete and ensure they have an access control set to use the permission "administer unmanaged files entities".
Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

DRUPAL-CONTRIB-2022-023

Affected Products

Drupal/Fancy File Delete