EUVD-2013-0278

Malware in sbrugna...

EUVD-2009-3190

Malware in sbrugna...

CVE-2022-25275

In some situations, the Image module does not correctly check access to image files not stored in the standard public files directory when generating derivative images using the image styles system. Access to a non-public file is checked only if it is stored in the "private" file system. However,...

GHSA-XH3V-6F9J-WXW3 Drupal core Information Disclosure vulnerability

In some situations, the Image module does not correctly check access to image files not stored in the standard public files directory when generating derivative images using the image styles system. Access to a non-public file is checked only if it is stored in the "private" file system. However,...

CVE-2013-0246

The Image module in Drupal 7.x before 7.19, when a private file system is used, does not properly restrict access to derivative images, which allows remote attackers to read derivative images of otherwise restricted images via unspecified vectors...

CVE-2013-0246

Removed by vendor...

PT-2013-2185

Name of the Vulnerable Software and Affected Versions Drupal versions prior to 7.19 Description The issue concerns the Image module in Drupal, where it fails to properly restrict access to derivative images when a private file system is used. This allows remote attackers to read derivative images...

CVE-2013-0246: Undefined Security Weakness

The Image module in Drupal 7.x before 7.19, when a private file system is used, does not properly restrict access to derivative images, which allows remote attackers to read derivative images of otherwise restricted images via unspecified vectors...

CVE-2009-3207

The ImageCache module 5.x before 5.x-2.5 and 6.x before 6.x-2.0-beta10, a module for Drupal, when the private file system is used, does not properly perform access control for derivative images, which allows remote attackers to view arbitrary images via a request that specifies an image's filenam...