The Mime Mail module 6.x-1.x before 6.x-1.1 for Drupal does not properly restrict access to files outside Drupals publish files directory, which allows remote authenticated users to send arbitrary files as attachments.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Mimemail | Mime_mail_module_project | 6.x-1.0 | 6.x-1.0 |
Mimemail | Mime_mail_module_project | 6.x-1.0 | 6.x-1.0 |
Mimemail | Mime_mail_module_project | 6.x-1.0 | 6.x-1.0 |
Mimemail | Mime_mail_module_project | 6.x-1.0 | 6.x-1.0 |
Mimemail | Mime_mail_module_project | 6.x-1.0 | 6.x-1.0 |
Mimemail | Mime_mail_module_project | 6.x-1.0 | 6.x-1.0 |
Mimemail | Mime_mail_module_project | 6.x-1.0 | 6.x-1.0 |
Mimemail | Mime_mail_module_project | 6.x-1.0 | 6.x-1.0 |
Mimemail | Mime_mail_module_project | 6.x-1.0 | 6.x-1.0 |
Mimemail | Mime_mail_module_project | 6.x-1.0 | 6.x-1.0 |
Mimemail | Mime_mail_module_project | 6.x-1.0 | 6.x-1.0 |
Mimemail | Mime_mail_module_project | 6.x-1.x | 6.x-1.x |