Description
The File module in Drupal 7.x before 7.11, when using unspecified field access modules, allows remote authenticated users to read arbitrary private files that are associated with restricted fields via unspecified vectors.
Remediation
References
Related Vulnerabilities
WordPress Plugin Imsanity Unspecified Vulnerability (2.3.3)
WordPress Plugin Flexible Captcha Multiple Vulnerabilities (3.3)
WordPress Plugin WatchTowerHQ Privilege Escalation (3.6.16)
Oracle Database Server Other Vulnerability (CVE-2007-0277)
MyBB Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2022-24734)