MGASA-2017-0198
- Source
- https://advisories.mageia.org/MGASA-2017-0198.html
- Import Source
- https://advisories.mageia.org/MGASA-2017-0198.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/MGASA-2017-0198
- Related
- Published
- 2017-06-29T21:40:57Z
- Modified
- 2017-06-29T21:25:45Z
- Summary
- Updated drupal packages fix security vulnerability
- Details
-
Greg Knaddison, Mori Sugimoto and iancawthorne discovered that files uploaded by anonymous users into a private file system can be accessed by other anonymous users leading to an access bypass vulnerability (CVE-2017-6922).
- References
-
- https://advisories.mageia.org/MGASA-2017-0198.html
- https://bugs.mageia.org/show_bug.cgi?id=21152
- https://www.drupal.org/SA-CORE-2017-003
- https://www.drupal.org/project/drupal/releases/7.53
- https://www.drupal.org/project/drupal/releases/7.54
- https://www.drupal.org/project/drupal/releases/7.55
- https://www.drupal.org/project/drupal/releases/7.56
- https://www.debian.org/security/2017/dsa-3897
- Credits
-
-
- Mageia - COORDINATOR
-
Affected packages
Mageia:5 / drupal
Package
- Name
- drupal
- Purl
- pkg:rpm/mageia/drupal?distro=mageia-5