CVE-2023-31250
published 2023-04-26CVE-2023-31250: The file download facility doesn't sufficiently sanitize file paths in certain situations. This may result in users gaining access to private files that they…
PriorityP336medium6.5CVSS 3.1
AVNACLPRLUINSUCHINAN
EPSS
0.54%
41.3th percentile
The file download facility doesn't sufficiently sanitize file paths in certain situations. This may result in users gaining access to private files that they should not have access to. Some sites may require configuration changes following this security release. Review the release notes for your Drupal version if you have issues accessing private files after updating.
Affected
14 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| drupal | core | >= 10.0 < 10.0.8 | 10.0.8 |
| drupal | core | >= 10.0.0 < 10.0.8 | 10.0.8 |
| drupal | core | >= 7.0 < 7.96 | 7.96 |
| drupal | core | >= 7.0.0 < 7.96 | 7.96 |
| drupal | core | >= 8.0.0 < 9.4.14 | 9.4.14 |
| drupal | core | >= 9.0.0 < 9.4.14 | 9.4.14 |
| drupal | core | >= 9.4 < 9.4.14 | 9.4.14 |
| drupal | core | >= 9.5 < 9.5.8 | 9.5.8 |
| drupal | core | >= 9.5.0 < 9.5.8 | 9.5.8 |
| drupal | drupal | >= 10.0 < 10.0.8 | 10.0.8 |
| drupal | drupal | >= 7.0 < 7.96 | 7.96 |
| drupal | drupal | >= 9.4 < 9.4.14 | 9.4.14 |
| drupal | drupal | >= 9.5 < 9.5.8 | 9.5.8 |
| drupal | drupal_core | — | — |
CVSS provenance
nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
osv6.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
CVE-2023-31250: The file download facility doesn't sufficiently sanitize file paths in certain situations
osv·2023-04-26·CVSS 6.5
CVE-2023-31250 [MEDIUM] CVE-2023-31250: The file download facility doesn't sufficiently sanitize file paths in certain situations
The file download facility doesn't sufficiently sanitize file paths in certain situations. This may result in users gaining access to private files that they should not have access to. Some sites may require configuration changes following this security release. Review the release notes for your Drupal version if you have issues accessing private files after updating.
OSV
Access bypass in Drupal core
osv·2023-04-26
CVE-2023-31250 [CRITICAL] Access bypass in Drupal core
Access bypass in Drupal core
The file download facility doesn't sufficiently sanitize file paths in certain situations. This may result in users gaining access to private files that they should not have access to. Some sites may require configuration changes following this security release. Review the release notes for your Drupal version if you have issues accessing private files after updating.
GHSA
Access bypass in Drupal core
ghsa·2023-04-26
CVE-2023-31250 [CRITICAL] Access bypass in Drupal core
Access bypass in Drupal core
The file download facility doesn't sufficiently sanitize file paths in certain situations. This may result in users gaining access to private files that they should not have access to. Some sites may require configuration changes following this security release. Review the release notes for your Drupal version if you have issues accessing private files after updating.
OSV
CVE-2023-31250: The file download facility doesn't sufficiently sanitize file paths in certain situations
osv·2023-04-19
CVE-2023-31250 CVE-2023-31250: The file download facility doesn't sufficiently sanitize file paths in certain situations
The file download facility doesn't sufficiently sanitize file paths in certain situations. This may result in users gaining access to private files that they should not have access to.
Some sites may require configuration changes following this security release. Review the release notes for your Drupal version if you have issues accessing private files after updating.
This advisory **is** covered by [Drupal Steward](/steward). Because this vulnerability is not mass exploitable, your Steward partner may respond by monitoring-only, rather than enforcing a new WAF rule.
We would normally not apply for a release of this severity. However, in this case we have chosen to apply Drupal Steward security coverage to test our processes.
#### Drupal 7
* All Drupal 7 sites on Windows web servers a
Drupal
Drupal core - Moderately critical - Access bypass - SA-CORE-2023-005
vendor_drupal·2023-04-19
CVE-2023-31250 [MEDIUM] Drupal core - Moderately critical - Access bypass - SA-CORE-2023-005
Title: Drupal core - Moderately critical - Access bypass - SA-CORE-2023-005
Vulnerability Type: Access bypass
Description: The file download facility doesn't sufficiently sanitize file paths in certain situations. This may result in users gaining access to private files that they should not have access to. Some sites may require configuration changes following this security release. Review the release notes for your Drupal version if you have issues accessing private files after updating. This advisory is covered by Drupal Steward . Because this vulnerability is not mass exploitable, your Steward partner may respond by monitoring-only, rather than enforcing a new WAF rule. We would normally not apply for a release of this severity. However, in this case we have chosen to apply Drupal Ste
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2023-04-26
Published