CVE-2026-3526
This module moves files to and from private storage depending on the access of its owning entities. The module does not always validate the access lo...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
This module moves files to and from private storage depending on the access of its owning entities.
The module does not always validate the access logic correctly, resulting in files attached to an entity not being protected in certain circumstances.
This vulnerability is mitigated by the fact that saving an entity a second time resolves the issue.
影響パッケージ
Packagist:https://packages.drupal.org/8
drupal/file_access_fix
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.0"}],"database_specific":{"constraint":"<1.2.0"}}]
参照URL
- web drupal.org