Catégories
CVE-2026-81163

A module to import media files into media library. The import folder is a plain textfield with no validation. Point it at any directory the web user...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

A module to import media files into media library.

The import folder is a plain textfield with no validation. Point it at any directory the web user can read, and the importer copies every file whose extension matches a selected media type into the public files directory and publishes it as a Media entity. Files that were deliberately kept outside the webroot, such as a private file store, become downloadable by anonymous visitors at a predictable URL.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Paquets affectés

Packagist:https://packages.drupal.org/8 drupal/media_library_importer
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.6"}],"database_specific":{"constraint":"<2.1.6"}}]

Références

Nous utilisons des cookies pour l'analyse d'audience et la mesure publicitaire. Ce réglage s'applique à tous les sites de Game co., Ltd. En savoir plus