Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Drupal Improper Access Control Vulnerability - CVE-2016-3162 - Vulnerability Database
Drupal

Drupal Improper Access Control Vulnerability - CVE-2016-3162

High
Reference: CVE-2016-3162
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2016-3162
Title: Drupal Improper Access Control Vulnerability
Overview:

The File module in Drupal 7.x before 7.43 and 8.x before 8.0.4 allows remote authenticated users to bypass access restrictions and read delete or substitute a link to a file uploaded to an unprocessed form by leveraging permission to create content or comment and upload files.