Unscored DRUPAL-CONTRIB-2018-014

This module enables you to drag and drop or paste images into CKEditor. The module does not sufficiently verify users permissions, which le…

Published Feb 21, 2018 · Updated Sep 10, 2026 · Assigned by DRUPAL

Package: drupal/ckeditor_uploadimage Ecosystem: Packagist

Description

This module enables you to drag and drop or paste images into CKEditor.
The module does not sufficiently verify users permissions, which leads to anonymous users being able to upload files to the server.

Affected packages

Ecosystem	Package	Affected	Fixed	Record
Packagist	drupal/ckeditor_uploadimage	< 1.5.0	1.5.0	DRUPAL-CONTRIB-2018-014

References

https://www.drupal.org/sa-contrib-2018-014 web