| Package | Affected versions | Patched versions |
|---|---|---|
| drupal/s3fs_cors | < 1.3.0 | 1.3.0 |
This module enables you to upload files from the browser directly to Amazon S3 and register them as Drupal files, bypassing normal PHP file size and timeout limits.
The module doesn't sufficiently check access to file uploads. Under certain scenarios, users can delete files they should not have access to.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free