| Package | Affected versions | Patched versions |
|---|---|---|
| drupal | = 7.0= 7.1= 7.10= 7.11= 7.12= 7.13= 7.14= 7.15= 7.16= 7.17= 7.18= 7.2= 7.3= 7.4= 7.5= 7.6= 7.7= 7.8= 7.9= 7.x-dev |
The Image module in Drupal 7.x before 7.19, when a private file system is used, does not properly restrict access to derivative images, which allows remote attackers to read derivative images of otherwise restricted images via unspecified vectors.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free