Drupal Reflected file download vulnerability
Impact
The System module in Drupal 6.x before 6.38 and 7.x before 7.43 might allow remote attackers to hijack the authentication of site administrators for requests that download and run files with arbitrary JSON-encoded content, aka a "reflected file download vulnerability."
Source excerpt · OSVAffected packages
Start with the recorded fix for your release branch. Check your installed version and test compatibility before upgrading. Fixing this advisory does not rule out other vulnerabilities in the release.
| Affected range | Recorded fix |
|---|---|
| From 6.0 before 6.38Ecosystem versions | 6.38 |
| From 7.0 before 7.43Ecosystem versions | 7.43 |
Version evidence: OSV · GHSA-qqxc-cppg-4xp8
View original version evidence (0 explicit versions)
| Affected range | Recorded fix |
|---|---|
| From 7.0 before 7.43Ecosystem versions | 7.43 |
| From 6.0 before 6.38Ecosystem versions | 6.38 |
Version evidence: OSV · GHSA-qqxc-cppg-4xp8
View original version evidence (0 explicit versions)
Original source description
The System module in Drupal 6.x before 6.38 and 7.x before 7.43 might allow remote attackers to hijack the authentication of site administrators for requests that download and run files with arbitrary JSON-encoded content, aka a "reflected file download vulnerability."
References
- Security advisory nvd.nist.gov/vuln/detail/CVE-2016-3168
- Security advisory github.com/FriendsOfPHP/security-advisories/blob/master/drupal/core/CVE-2016-3168.yaml
- Security advisory github.com/FriendsOfPHP/security-advisories/blob/master/drupal/drupal/CVE-2016-3168.yaml
- Source reference github.com/drupal/core
- Security advisory www.drupal.org/SA-CORE-2016-001
- Security advisory www.debian.org/security/2016/dsa-3498
- Security advisory www.openwall.com/lists/oss-security/2016/02/24/19
- Security advisory www.openwall.com/lists/oss-security/2016/03/15/10