Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2016-7572
4
MEDIUMCVSS v2
Published
October 3, 2016
Affected
3 projects
Assigned by
MITRE
Severity scale
010
Description
The system.temporary route in Drupal 8.x before 8.1.10 does not properly check for "Export configuration" permission, which allows remote authenticated users to bypass intended access restrictions and read a full config export via unspecified vectors.
drupal/drupal
GitHubVerbatim mirror of the git.drupal.org repository for Drupal core. Please see the https://github.com/drupal/drupal#contributing. PRs are not accepted on GitHub.
GitHubVerbatim mirror of the git.drupal.org repository for Drupal core. Please see the https://github.com/drupal/drupal#contributing. PRs are not accepted on GitHub.= 8.0.0, = 8.1.0, = 8.1.9, = 8.1.8, = 8.0.4, = 8.1.5, = 8.1.2, = 8.1.6, = 8.0.5, = 8.1.7, = 8.0.1, = 8.0.2, = 8.0.3, = 8.1.3, = 8.0.6, = 8.1.1, = 8.1.4NVD
drupal
RubyGemsComing Soon! This gem is in development - Dont use it, Drupal integration with rails app
RubyGemsComing Soon! This gem is in development - Dont use it, Drupal integration with rails app= 8.0.0, = 8.1.0, = 8.1.9, = 8.1.8, = 8.0.4, = 8.1.5, = 8.1.2, = 8.1.6, = 8.0.5, = 8.1.7, = 8.0.1, = 8.0.2, = 8.0.3, = 8.1.3, = 8.0.6, = 8.1.1, = 8.1.4NVD
NPM