Vulnerabilities > CVE-2009-3781 - Missing Authorization vulnerability in Quicksketch Filefield 6.X3.1

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
quicksketch
CWE-862
NVD
Published: 2009-10-26
Updated: 2024-11-21

Summary

The filefield_file_download function in FileField 6.x-3.1, a module for Drupal, does not properly check node-access permissions for Drupal core private files, which allows remote attackers to access unauthorized files via unspecified vectors.

Vulnerable Configurations

Part Description Count
Application
Quicksketch
1

Common Weakness Enumeration (CWE)

References