CVE-2014-8736

The Open Atrium Core module for Drupal before 7.x-2.22 allows remote attackers to bypass access restrictions and read file attachments that have been removed from a node by leveraging a previous revision of the node.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2014-11-12

Last modified

2024-09-17

Weaknesses

CWE-200

Affected products

• Open Atrium (Open Atrium Project)

References

• https://www.drupal.org/node/2357279
• https://www.drupal.org/node/2357295