Description
Drupal Core is prone to a directory traversal vulnerability because it fails to sufficiently verify user-supplied input. Exploiting this issue can allow an attacker to obtain sensitive information that could aid in further attacks. Drupal Core versions 7.x ranging from 7.0 and up to and including 7.66 are vulnerable.
Remediation
Update to Drupal Core version 7.67 or latest
References
Related Vulnerabilities
WordPress Plugin All-in-One WP Migration Arbitrary File Deletion (7.58)
SugarCRM Other Vulnerability (CVE-2004-1225)
Magento CVE-2019-8144 Vulnerability (CVE-2019-8144)
PHP Improper Input Validation Vulnerability (CVE-2006-7243)
ownCloud Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2013-0299)