CVE-2012-4495

Published: Oct 31, 2012Modified: Apr 29, 2026

4.0

Vector

AV:N/AC:L/Au:S/C:N/I:P/A:N

Exploitability: 8.0 / Impact: 2.9

Source: NVD

Description

The Mime Mail module 6.x-1.x before 6.x-1.1 for Drupal does not properly restrict access to files outside Drupal's publish files directory, which allows remote authenticated users to send arbitrary files as attachments.

Affected (12)

Products: Mime Mail Module Project: Mimemail

Mime Mail Module Project

1 product

Mimemail

Configuration A

12 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mime Mail Module Project Mimemail	Version 6.x-1.0
Mime Mail Module Project Mimemail	Version 6.x-1.0 alpha1
Mime Mail Module Project Mimemail	Version 6.x-1.0 alpha2
Mime Mail Module Project Mimemail	Version 6.x-1.0 alpha3
Mime Mail Module Project Mimemail	Version 6.x-1.0 alpha4
Mime Mail Module Project Mimemail	Version 6.x-1.0 alpha5
Mime Mail Module Project Mimemail	Version 6.x-1.0 alpha6
Mime Mail Module Project Mimemail	Version 6.x-1.0 alpha7
Mime Mail Module Project Mimemail	Version 6.x-1.0 alpha8
Mime Mail Module Project Mimemail	Version 6.x-1.0 beta1
Mime Mail Module Project Mimemail	Version 6.x-1.0 beta2
Mime Mail Module Project Mimemail	Version 6.x-1.x dev