CVE-2013-4502

Published: May 13, 2014Modified: May 6, 2026

4.0

Vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

Exploitability: 8.0 / Impact: 2.9

Source: NVD

Description

The FileField Sources module 6.x-1.x before 6.x-1.9 and 7.x-1.x before 7.x-1.9 for Drupal does not properly check file permissions, which allows remote authenticated users to read arbitrary files by attaching a file.

Affected (17)

Products: Nathan Haug: Filefield Sources

Nathan Haug

1 product

Filefield Sources

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Nathan Haug Filefield Sources	Version 7.x-1.2 beta1
Nathan Haug Filefield Sources	Version 7.x-1.3
Nathan Haug Filefield Sources	Version 7.x-1.4
Nathan Haug Filefield Sources	Version 7.x-1.5
Nathan Haug Filefield Sources	Version 7.x-1.6
Nathan Haug Filefield Sources	Version 7.x-1.7
Nathan Haug Filefield Sources	Version 7.x-1.8
Nathan Haug Filefield Sources	Version 7.x-1.x dev

Configuration B

9 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Nathan Haug Filefield Sources	Version 6.x-1.0
Nathan Haug Filefield Sources	Version 6.x-1.1
Nathan Haug Filefield Sources	Version 6.x-1.2
Nathan Haug Filefield Sources	Version 6.x-1.3
Nathan Haug Filefield Sources	Version 6.x-1.4
Nathan Haug Filefield Sources	Version 6.x-1.5
Nathan Haug Filefield Sources	Version 6.x-1.6
Nathan Haug Filefield Sources	Version 6.x-1.7
Nathan Haug Filefield Sources	Version 6.x-1.8