CVE-2015-4351

2015-06-1514:00:00

mitre

www.cve.org

AI Score

6.3

Confidence

Low

EPSS

0.003

Percentile

65.2%

JSON

The Spider Video Player module for Drupal allows remote authenticated users with the “access Spider Video Player administration” permission to delete arbitrary files via a crafted URL.

References

www.openwall.com/lists/oss-security/2015/04/25/6

www.securityfocus.com/bid/72817

www.drupal.org/node/2437981