CVE-2011-4972

hook_file_download in the CKEditor module 7.x-1.4 for Drupal does not properly restrict access to private files, which allows remote attackers to read private…

published November 13, 2019

CVSS
—
EPSS
2%
Percentile
77.5
In the wild
Unconfirmed
What it is

hook_file_download in the CKEditor module 7.x-1.4 for Drupal does not properly restrict access to private files, which allows remote attackers to read private files via a direct request.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01744 · 77.5th percentile
Published
2019-11-13T20:51Z
EPSS history
Timeline
  • 13 NOV 20:51Z
    hook_file_download in the CKEditor module 7.x-1.4 for Drupal does not properly restrict access to private files, which allows remote attackers to read private…
    cvelistv5