When adding a private file via the editor in Drupal 8.2.x before 8.2.7, the editor will not correctly check access for the file being attached, resulting in an access bypass.
CPE | Name | Operator | Version |
---|---|---|---|
drupal | eq | 8.0-alpha3 | |
drupal | eq | 8.0-alpha10 | |
drupal | eq | start | |
drupal | eq | 7.0-rc-3 | |
drupal | eq | 8.0.0-beta11 | |
drupal | eq | 8.0.0-rc1 | |
drupal | eq | 8.2.0-rc2 | |
drupal | eq | 7.0 | |
drupal | eq | 8.0-alpha9 | |
drupal | eq | 7.0-rc-2 |