Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 27 Oct 2026 13:28:32 +0000 certfr-2017-avi-085 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Drupal</span>. Elles permettent à un attaquant… https://cve.radiocsirt.org/vuln/certfr-2017-avi-085 certfr-2017-avi-085 https://cve.radiocsirt.org/vuln/certfr-2017-avi-085 EUVD-2026-73893 https://cve.radiocsirt.org/vuln/euvd-2026-73893 EUVD-2026-73893 https://cve.radiocsirt.org/vuln/euvd-2026-73893 fkie_cve-2017-6377 https://cve.radiocsirt.org/vuln/fkie_cve-2017-6377 <p>When adding a private file via the editor in Drupal 8.2.x before 8.2.7, the editor will not correctly check access for the file being attached, resulting in an access bypass.</p> <p>When adding a private file via the editor in Drupal 8.2.x before 8.2.7, the editor will not correctly check access for the file being attached, resulting in an access bypass.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-6377 GHSA-w7qx-vwr9-2j3r — Drupal editor module incorrectly checks access to inline private files https://cve.radiocsirt.org/vuln/ghsa-w7qx-vwr9-2j3r <p><strong>Affected:</strong> Packagist: drupal/core, Packagist: drupal/drupal</p> <p>When adding a private file via the editor in Drupal 8.2.x before 8.2.7, the editor will not correctly check access for the file being attached, resulting in an access bypass.</p> <p><strong>Affected:</strong> Packagist: drupal/core, Packagist: drupal/drupal</p> <p>When adding a private file via the editor in Drupal 8.2.x before 8.2.7, the editor will not correctly check access for the file being attached, resulting in an access bypass.</p> https://cve.radiocsirt.org/vuln/ghsa-w7qx-vwr9-2j3r gsd-2017-6377 https://cve.radiocsirt.org/vuln/gsd-2017-6377 gsd-2017-6377 https://cve.radiocsirt.org/vuln/gsd-2017-6377