https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 14:23:33 +0000 https://cve.radiocsirt.org/vuln/certfr-2017-avi-192 certfr-2017-avi-192 https://cve.radiocsirt.org/vuln/certfr-2017-avi-192 https://cve.radiocsirt.org/vuln/cnvd-2017-13904 cnvd-2017-13904 https://cve.radiocsirt.org/vuln/cnvd-2017-13904 https://cve.radiocsirt.org/vuln/euvd-2026-169118 EUVD-2026-169118 https://cve.radiocsirt.org/vuln/euvd-2026-169118 https://cve.radiocsirt.org/vuln/fkie_cve-2017-6922 <p>In Drupal core 8.x prior to 8.3.4 and Drupal core 7.x prior to 7.56; Private files that have been uploaded by an anonymous user but not permanently attached to content on the site should only be visible to the anonymous user that uploaded them, rather than all anonymous users. Drupal core did not previously provide this protection, allowing an access bypass vulnerability to occur. This issue is mitigated by the fact that in order to be affected, the site must allow anonymous users to upload files into a private file system.</p> <p>In Drupal core 8.x prior to 8.3.4 and Drupal core 7.x prior to 7.56; Private files that have been uploaded by an anonymous user but not permanently attached to content on the site should only be visible to the anonymous user that uploaded them, rather than all anonymous users. Drupal core did not previously provide this protection, allowing an access bypass vulnerability to occur. This issue is mitigated by the fact that in order to be affected, the site must allow anonymous users to upload files into a private file system.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-6922 https://cve.radiocsirt.org/vuln/ghsa-58f3-cx8p-h8jg <p><strong>Affected:</strong> Packagist: drupal/core, Packagist: drupal/drupal</p> <p>In Drupal core 8.x prior to 8.3.4 and Drupal core 7.x prior to 7.56; Private files that have been uploaded by an anonymous user but not permanently attached to content on the site should only be visible to the anonymous user that uploaded them, rather than all anonymous users. Drupal core did not previously provide this protection, allowing an access bypass vulnerability to occur. This issue is mitigated by the fact that in order to be affected, the site must allow anonymous users to upload files into a private file system.</p> <p><strong>Affected:</strong> Packagist: drupal/core, Packagist: drupal/drupal</p> <p>In Drupal core 8.x prior to 8.3.4 and Drupal core 7.x prior to 7.56; Private files that have been uploaded by an anonymous user but not permanently attached to content on the site should only be visible to the anonymous user that uploaded them, rather than all anonymous users. Drupal core did not previously provide this protection, allowing an access bypass vulnerability to occur. This issue is mitigated by the fact that in order to be affected, the site must allow anonymous users to upload files into a private file system.</p> https://cve.radiocsirt.org/vuln/ghsa-58f3-cx8p-h8jg https://cve.radiocsirt.org/vuln/gsd-2017-6922 gsd-2017-6922 https://cve.radiocsirt.org/vuln/gsd-2017-6922 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-6922 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: drupal7, Ubuntu:Pro:16.04:LTS: drupal7</p> <p>In Drupal core 8.x prior to 8.3.4 and Drupal core 7.x prior to 7.56; Private files that have been uploaded by an anonymous user but not permanently attached to content on the site should only be visible to the anonymous user that uploaded them, rather than all anonymous users. Drupal core did not previously provide this protection, allowing an access bypass vulnerability to occur. This issue is mitigated by the fact that in order to be affected, the site must allow anonymous users to upload files into a private file system.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: drupal7, Ubuntu:Pro:16.04:LTS: drupal7</p> <p>In Drupal core 8.x prior to 8.3.4 and Drupal core 7.x prior to 7.56; Private files that have been uploaded by an anonymous user but not permanently attached to content on the site should only be visible to the anonymous user that uploaded them, rather than all anonymous users. Drupal core did not previously provide this protection, allowing an access bypass vulnerability to occur. This issue is mitigated by the fact that in order to be affected, the site must allow anonymous users to upload files into a private file system.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-6922