| Package | Affected versions | Patched versions |
|---|---|---|
| drupal | = 6.0= 6.1= 6.2= 6.3≤ 6.4 |
The validation functionality in the core upload module in Drupal 6.x before 6.5 allows remote authenticated users to bypass intended access restrictions and "attach files to content," related to a "logic error."
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free