Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The project_issue_access function in the Project issue tracking 4.7.0 through 5.x before 20070123 module for Drupal allows remote authenticated users to bypass other access control modules and obtain attached files by guessing the filename, and obtain issue information via direct requests.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Drupal project_issue_access函数安全信息泄露漏洞
Vulnerability Description
Drupal项目事件追踪模块20070123之前的4.7.0到5.x版本中的project_issue_access函数允许远程认证用户通过猜测出文件名，来绕过其他的访问控制模块和获得附件；借助直接请求，获得事件信息。
CVSS Information
N/A
Vulnerability Type
N/A