CVE-2013-0246

The Image module in Drupal 7.x before 7.19, when a private file system is used, does not properly restrict access to derivative images, which allows remote…

published July 16, 2013

CVSS
—
EPSS
2%
Percentile
81.6
In the wild
Unconfirmed
What it is

The Image module in Drupal 7.x before 7.19, when a private file system is used, does not properly restrict access to derivative images, which allows remote attackers to read derivative images of otherwise restricted images via unspecified vectors.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02104 · 81.6th percentile
Published
2013-07-16T18:00Z
EPSS history
Timeline
  • 16 JUL 18:00Z
    The Image module in Drupal 7.x before 7.19, when a private file system is used, does not properly restrict access to derivative images, which allows remote…
    cvelistv5