Drupal core – Moderately critical – Information Disclosure – SA-CORE-2022-012

Drupal core - Moderately critical - Information Disclosure - SA-CORE-2022-012

Project: Drupal coreDate: 2022-July-20Security risk: Moderately critical 13∕25 AC:None/A:None/CI:Some/II:None/E:Theoretical/TD:UncommonVulnerability: Information DisclosureDescription: In some situations, the Image module does not correctly check access to image files not stored in the standard public files directory when generating derivative images using the image styles system.Access to a non-public file is checked only if it is stored in the "private" file system. However,

More info:

https://www.drupal.org/sa-core-2022-012Leer másÚltimas Vulnerabilidades

Project: Drupal coreDate: 2022-July-20Security risk: Moderately critical 13∕25 AC:None/A:None/CI:Some/II:None/E:Theoretical/TD:UncommonVulnerability: Information DisclosureDescription: In some situations, the Image module does not correctly check access to image files not stored in the standard public files directory when generating derivative images using the image styles system.Access to a non-public file is checked only if it is stored in the "private" file system. However, More info: https://www.drupal.org/sa-core-2022-012