Drupal FileField Sources Module Access Bypass Vulnerability
BID:63446
Info
Drupal FileField Sources Module Access Bypass Vulnerability
| Bugtraq ID: | 63446 |
| Class: | Access Validation Error |
| CVE: |
CVE-2013-4502 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 30 2013 12:00AM |
| Updated: | Nov 06 2013 01:01AM |
| Credit: | Joseph Lee |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Drupal FileField Sources Module Access Bypass Vulnerability
The FileField Sources module for Drupal is prone to an access-bypass vulnerability.
Successfully exploiting this issue may allow an attacker to bypass certain security restrictions and gain access to sensitive information. This may aid in launching other attacks.
The following versions of FileField Sources are vulnerable:
6.x-1.x versions prior to 6.x-1.9
7.x-1.x versions prior to 7.x-1.9
The FileField Sources module for Drupal is prone to an access-bypass vulnerability.
Successfully exploiting this issue may allow an attacker to bypass certain security restrictions and gain access to sensitive information. This may aid in launching other attacks.
The following versions of FileField Sources are vulnerable:
6.x-1.x versions prior to 6.x-1.9
7.x-1.x versions prior to 7.x-1.9
Exploit / POC
Drupal FileField Sources Module Access Bypass Vulnerability
An attacker can exploit this issue using a web browser.
An attacker can exploit this issue using a web browser.
Solution / Fix
Drupal FileField Sources Module Access Bypass Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.