CVE-2014-9156
The FileField module 6.x-3.x before 6.x-3.13 for Drupal does not properly check permissions to view files, which allows remote authenticated users with permission to create or e…
Published: 2014-12-01 · CVSS: Unscored
The FileField module 6.x-3.x before 6.x-3.13 for Drupal does not properly check permissions to view files, which allows remote authenticated users with permission to create or edit content to read private files by attaching an uploaded file.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7