Lucene search
GoogleOSV:GHSA-W2PJ-C8X5-JVG2HistoryMay 17, 2022 - 3:56 a.m.
Drupal File upload access bypass and denial of service
2022-05-1703:56:29
Google
osv.dev
3
drupal
file module
access bypass
denial of service
7.x
8.x
remote authenticated users
access restrictions
upload files
The File module in Drupal 7.x before 7.43 and 8.x before 8.0.4 allows remote authenticated users to bypass access restrictions and read, delete, or substitute a link to a file uploaded to an unprocessed form by leveraging permission to create content or comment and upload files.
References
www.debian.org/security/2016/dsa-3498
www.openwall.com/lists/oss-security/2016/02/24/19
www.openwall.com/lists/oss-security/2016/03/15/10
github.com/drupal/core
github.com/FriendsOfPHP/security-advisories/blob/master/drupal/core/CVE-2016-3162.yaml
github.com/FriendsOfPHP/security-advisories/blob/master/drupal/drupal/CVE-2016-3162.yaml
nvd.nist.gov/vuln/detail/CVE-2016-3162
www.drupal.org/SA-CORE-2016-001
Related
debiancve
debiancve
CVE-2016-3162
2016-04-12 15:59:00
friendsofphp
friendsofphp
File upload access bypass and denial of service
2016-02-15 18:57:00
File upload access bypass and denial of service
2016-02-15 18:57:00
veracode
veracode
Authorization Bypass
2017-07-26 03:27:09
ubuntucve
ubuntucve
CVE-2016-3162
2016-04-12 00:00:00
cve
cve
CVE-2016-3162
2016-04-12 15:59:00
github
github
Drupal File upload access bypass and denial of service
2022-05-17 03:56:29
prion
prion
Design/Logic Flaw
2016-04-12 15:59:00
nvd
nvd
CVE-2016-3162
2016-04-12 15:59:00
cvelist
cvelist
CVE-2016-3162
2016-04-12 15:00:00
openvas
openvas
Drupal 7.x < 7.43, 8.x < 8.0.4 Multiple Vulnerabilities (SA-CORE-2016-001) - Windows
2016-05-18 00:00:00
Drupal 7.x < 7.43, 8.x < 8.0.4 Multiple Vulnerabilities (SA-CORE-2016-001) - Linux
2016-05-18 00:00:00
Debian: Security Advisory (DSA-3498-1)
2016-03-08 00:00:00
nessus
nessus
Drupal 7.x < 7.43 Multiple Vulnerabilities
2016-03-04 00:00:00
Debian DSA-3498-1 : drupal7 - security update
2016-02-29 00:00:00
drupal
drupal
Drupal Core - Critical - Multiple Vulnerabilities - SA-CORE-2016-001
2016-02-24 00:00:00