CVE-2026-3525
This module moves files to and from private storage depending on the access of its owning entities. The module does not sufficiently incorporate the...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
This module moves files to and from private storage depending on the access of its owning entities.
The module does not sufficiently incorporate the results of hook_file_download when a custom or contrib module implements that hook leading to access bypass.
Paquets affectés
Packagist:https://packages.drupal.org/8
drupal/file_access_fix
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.0"}],"database_specific":{"constraint":"<1.2.0"}}]
Références
- web drupal.org