CVE-2017-6377

Description

When adding a private file via the editor in Drupal 8.2.x before 8.2.7, the editor will not correctly check access for the file being attached, resulting in an access bypass.

References

https://www.drupal.org/SA-2017-001

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-5528

http://www.securitytracker.com/id/1038058

http://www.securityfocus.com/bid/96919

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS