Lucene search
Veracode Vulnerability DatabaseVERACODE:4688HistoryJul 26, 2017 - 3:27 a.m.
Authorization Bypass
2017-07-2603:27:09
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
EPSS
0.002
Percentile
55.4%
Drupal is vulnerable to authorization bypass. Through the File module, attackers are able to view, delete, or substitute links to a file uploaded to a form that has yet to be processed. If this attack is done continuously, file uploads to the application may be blocked by deleting files before they can be saved.
Related
osv
osv
Drupal File upload access bypass and denial of service
2022-05-17 03:56:29
debiancve
debiancve
CVE-2016-3162
2016-04-12 15:59:00
friendsofphp
friendsofphp
File upload access bypass and denial of service
2016-02-15 18:57:00
File upload access bypass and denial of service
2016-02-15 18:57:00
cvelist
cvelist
CVE-2016-3162
2016-04-12 15:00:00
prion
prion
Design/Logic Flaw
2016-04-12 15:59:00
nvd
nvd
CVE-2016-3162
2016-04-12 15:59:00
cve
cve
CVE-2016-3162
2016-04-12 15:59:00
github
github
Drupal File upload access bypass and denial of service
2022-05-17 03:56:29
ubuntucve
ubuntucve
CVE-2016-3162
2016-04-12 00:00:00
openvas
openvas
Drupal 7.x < 7.43, 8.x < 8.0.4 Multiple Vulnerabilities (SA-CORE-2016-001) - Linux
2016-05-18 00:00:00
Drupal 7.x < 7.43, 8.x < 8.0.4 Multiple Vulnerabilities (SA-CORE-2016-001) - Windows
2016-05-18 00:00:00
Debian: Security Advisory (DSA-3498-1)
2016-03-08 00:00:00
nessus
nessus
Drupal 7.x < 7.43 Multiple Vulnerabilities
2016-03-04 00:00:00
Debian DSA-3498-1 : drupal7 - security update
2016-02-29 00:00:00
drupal
drupal
Drupal Core - Critical - Multiple Vulnerabilities - SA-CORE-2016-001
2016-02-24 00:00:00