Skip to content
OpenAdvisories
Unscored DRUPAL-CONTRIB-2018-017

This module enables you to retrieve image metadata and use them in fields or title. The module doesn't sufficiently restrict access to modu…

Published Mar 21, 2018 · Updated Sep 10, 2026 · Assigned by DRUPAL

Description

This module enables you to retrieve image metadata and use them in fields or title.

The module doesn't sufficiently restrict access to module setting pages thereby causing an access bypass vulnerability.

This vulnerability is mitigated by the fact that an attacker must have permission to create entities of certain content entity types.

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/exif < 1.1.0 1.1.0 DRUPAL-CONTRIB-2018-017

References