Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2013-0246
4.3
MEDIUMCVSS v2
Published
July 16, 2013
Affected
2 projects
Assigned by
Red Hat
Severity scale
010
Description
The Image module in Drupal 7.x before 7.19, when a private file system is used, does not properly restrict access to derivative images, which allows remote attackers to read derivative images of otherwise restricted images via unspecified vectors.
drupal/drupal
GitHubVerbatim mirror of the git.drupal.org repository for Drupal core. Please see the https://github.com/drupal/drupal#contributing. PRs are not accepted on GitHub.
GitHubVerbatim mirror of the git.drupal.org repository for Drupal core. Please see the https://github.com/drupal/drupal#contributing. PRs are not accepted on GitHub.= 7.0, = 7.16, = 7.18, = 7.15, = 7.5, = 7.4, = 7.6, = 7.x-dev, = 7.12, = 7.9, = 7.11, = 7.17, = 7.13, = 7.3, = 7.8, = 7.10, = 7.2, = 7.1, = 7.7, = 7.14NVD
drupal
NPMImplementation of parts of Drupal’s user/access control API.
NPMImplementation of parts of Drupal’s user/access control API.= 7.0, = 7.16, = 7.18, = 7.15, = 7.5, = 7.4, = 7.6, = 7.x-dev, = 7.12, = 7.9, = 7.11, = 7.17, = 7.13, = 7.3, = 7.8, = 7.10, = 7.2, = 7.1, = 7.7, = 7.14NVD