Unscored CVE-2015-4351 EUVD-2015-4374GHSA-cqqm-4g2v-qjrj

The Spider Video Player module for Drupal allows remote authenticated users with the "access Spider Video Player administration" permission…

Published Jun 15, 2015 · Updated Aug 6, 2024 · Assigned by mitre

Description

The Spider Video Player module for Drupal allows remote authenticated users with the "access Spider Video Player administration" permission to delete arbitrary files via a crafted URL.

References

72817 vdb-entry
[oss-security] 20150425 CVE requests for Drupal contributed modules (from SA-CONTRIB-2015-034 to SA-CONTRIB-2015-099) mailing-list
https://www.drupal.org/node/2437981