Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Nathan Haug Component: Filefield Sources Clear all filters
TI-2013-03950 CVE-2013-4502 · GHSA-r6c4-xjfx-r2x6

The FileField Sources module 6.x-1.x before 6.x-1.9 and 7.x-1.x before 7.x-1.9 for Drupal…

Priority LOW 21

The FileField Sources module 6.x-1.x before 6.x-1.9 and 7.x-1.x before 7.x-1.9 for Drupal does not properly check file permissions, which allows remote authenticated users to read arbitrary files by attaching a file.

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.01094 Published 2014-05-13 No fix listed CWE-264
TI-2012-04656 CVE-2012-5538 · GHSA-r22m-pfh4-7q39

Cross-site scripting (XSS) vulnerability in the FileField Sources module 6.x-1.x before…

Priority LOW 13

Cross-site scripting (XSS) vulnerability in the FileField Sources module 6.x-1.x before 6.x-1.6 and 7.x-1.x before 7.x-1.6 for Drupal, when the field has "Reference existing" source enabled, allows remote authenticated u…

CVSS 2.0LOW 2.1 Network Low privileges Interaction — EPSS 0.00941 Published 2012-12-03 No fix listed CWE-79