Freely subscribe to our NEWSLETTER

This bulletin was written by Vigil@nce : http://vigilance.fr/offer

SYNTHESIS OF THE VULNERABILITY

An attacker can use Drupal Avatar Uploader, in order to obtain
sensitive information.

Impacted products: Drupal Modules

Severity: 2/4

Creation date: 04/09/2014

DESCRIPTION OF THE VULNERABILITY

The Avatar Uploader module can be installed on Drupal.

However, an attacker can bypass access restrictions to data to
access to a file.

An attacker can therefore use Drupal Avatar Uploader, in order to
obtain sensitive information.

ACCESS TO THE COMPLETE VIGIL@NCE BULLETIN

http://vigilance.fr/vulnerability/Drupal-Avatar-Uploader-information-disclosure-15271