Description
The File module in Drupal 7.x before 7.11, when using unspecified field access modules, allows remote authenticated users to read arbitrary private files that are associated with restricted fields via unspecified vectors.
Remediation
References
Related Vulnerabilities
Envoy Proxy Out-of-bounds Write Vulnerability (CVE-2019-18801)
PostgreSQL NULL Pointer Dereference Vulnerability (CVE-2016-5423)
SharePoint CVE-2023-33159 Vulnerability (CVE-2023-33159)
WordPress 6.3.x Cross-Site Scripting (6.3 - 6.3.3)
IBM RTC Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-4946)