Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2017-6377
5
MEDIUMCVSS v2
Severity scale
010
Description
When adding a private file via the editor in Drupal 8.2.x before 8.2.7, the editor will not correctly check access for the file being attached, resulting in an access bypass.
drupal/drupal
GitHubVerbatim mirror of the git.drupal.org repository for Drupal core. Please see the https://github.com/drupal/drupal#contributing. PRs are not accepted on GitHub.
GitHubVerbatim mirror of the git.drupal.org repository for Drupal core. Please see the https://github.com/drupal/drupal#contributing. PRs are not accepted on GitHub.= 8.2.5, = 8.2.0, = 8.2.3, = 8.2.4, = 8.2.6, = 8.2.2, = 8.2.1NVD
drupal
RubyGemsComing Soon! This gem is in development - Dont use it, Drupal integration with rails app
RubyGemsComing Soon! This gem is in development - Dont use it, Drupal integration with rails app= 8.2.5, = 8.2.0, = 8.2.3, = 8.2.4, = 8.2.6, = 8.2.2, = 8.2.1NVD
NPM