QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2009-3207

Back to search

CVE-2009-3207

Published: Sep 16, 2009

Modified: Aug 7, 2024

PUBLISHED

Description

The ImageCache module 5.x before 5.x-2.5 and 6.x before 6.x-2.0-beta10, a module for Drupal, when the private file system is used, does not properly perform access control for derivative images, which allows remote attackers to view arbitrary images via a request that specifies an image's filename.

VendorProductVersions

n/a

n/a

affected
n/a

References

36412
third-party-advisory
x_refsource_SECUNIA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now