| Package | Affected versions | Patched versions |
|---|---|---|
| drupal/file_access_fix | < 1.2.0 | 1.2.0 |
| file access fix | < 8.x-1.2 | 8.x-1.2 |
This module moves files to and from private storage depending on the access of its owning entities.
The module does not sufficiently incorporate the results of hook_file_download when a custom or contrib module implements that hook leading to access bypass.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free