Security restrictions bypass in Drupal - CVE-2017-6921
Published: June 23, 2017
Vulnerability identifier: #VU7181
CSH Severity: Medium
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2017-6921
CWE-ID: CWE-20
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to bypass security restrictions on the site.
The weakness exists due to improper validation of some fields by the file REST resource when manipulating files. If the site has the RESTful Web Services (rest) module enabled, the file REST resource is enabled and allows PATCH requests and has, a remote attacker can obtain a user account on the site with permissions to upload files and to modify the file resource.
Successful exploitation of the vulnerability results in access bypass.
The weakness exists due to improper validation of some fields by the file REST resource when manipulating files. If the site has the RESTful Web Services (rest) module enabled, the file REST resource is enabled and allows PATCH requests and has, a remote attacker can obtain a user account on the site with permissions to upload files and to modify the file resource.
Successful exploitation of the vulnerability results in access bypass.
Affected software
Drupal
How to mitigate CVE-2017-6921
Update to version 8.3.4.