| Package | Affected versions | Patched versions |
|---|---|---|
| mimemail | = 6.x-1.0= 6.x-1.x |
The Mime Mail module 6.x-1.x before 6.x-1.1 for Drupal does not properly restrict access to files outside Drupal's publish files directory, which allows remote authenticated users to send arbitrary files as attachments.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free