| Package | Affected versions | Patched versions |
|---|---|---|
| drupal | = 7.0= 7.1= 7.10= 7.2= 7.3= 7.4= 7.5= 7.6= 7.7= 7.8= 7.9= 7.x-dev |
The File module in Drupal 7.x before 7.11, when using unspecified field access modules, allows remote authenticated users to read arbitrary private files that are associated with restricted fields via unspecified vectors.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free