Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2012-0827
3.5
LOWCVSS v2
Published
October 28, 2013
Affected
2 projects
Assigned by
Red Hat
Severity scale
010
Description
The File module in Drupal 7.x before 7.11, when using unspecified field access modules, allows remote authenticated users to read arbitrary private files that are associated with restricted fields via unspecified vectors.
drupal/drupal
GitHubVerbatim mirror of the git.drupal.org repository for Drupal core. Please see the https://github.com/drupal/drupal#contributing. PRs are not accepted on GitHub.
GitHubVerbatim mirror of the git.drupal.org repository for Drupal core. Please see the https://github.com/drupal/drupal#contributing. PRs are not accepted on GitHub.= 7.0, = 7.3, = 7.4, = 7.5, = 7.6, = 7.7, = 7.8, = 7.x-dev, = 7.10, = 7.2, = 7.9, = 7.1NVD
drupal
NPMImplementation of parts of Drupal’s user/access control API.
NPMImplementation of parts of Drupal’s user/access control API.= 7.0, = 7.3, = 7.4, = 7.5, = 7.6, = 7.7, = 7.8, = 7.x-dev, = 7.10, = 7.2, = 7.9, = 7.1NVD