CVE-2012-2719
27.06.2012, 00:55
The filedepot module 6.x-1.x before 6.x-1.3 for Drupal, when accessed using multiple different browsers from the same IP address, causes Internet Explorer sessions to "switch users" when uploading a file, which has unspecified impact possibly involving file uploads to the wrong user directory, aka "Session Management Vulnerability."Enginsight
| Vendor | Product | Version |
|---|---|---|
| blaine_lang | filedepot | 6.x-1.0:x |
| blaine_lang | filedepot | 6.x-1.0:x |
| blaine_lang | filedepot | 6.x-1.0:x |
| blaine_lang | filedepot | 6.x-1.0:x |
| blaine_lang | filedepot | 6.x-1.0:x |
| blaine_lang | filedepot | 6.x-1.1:x |
| blaine_lang | filedepot | 6.x-1.2:x |
| blaine_lang | filedepot | 6.x-1.x:x |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References