CVE-2014-5020

The File module in Drupal 7.x before 7.29 does not properly check permissions to view files, which allows remote authenticated users with certain permissions…

published July 22, 2014

CVSS
—
EPSS
1%
Percentile
70.7
In the wild
Unconfirmed
What it is

The File module in Drupal 7.x before 7.29 does not properly check permissions to view files, which allows remote authenticated users with certain permissions to bypass intended restrictions and read files by attaching the file to content with a file field.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01323 · 70.7th percentile
Published
2014-07-22T14:00Z
EPSS history
Timeline
  • 22 JUL 14:00Z
    The File module in Drupal 7.x before 7.29 does not properly check permissions to view files, which allows remote authenticated users with certain permissions…
    cvelistv5