DRUPAL-CONTRIB-2018-014
No scoreFix available
This module enables you to drag and drop or paste images into CKEditor.
The module does not sufficiently verify users permissions, which leads to anonymous users being able to upload files to the server.
What each source reports
OSV No score
This module enables you to drag and drop or paste images into CKEditor.
The module does not sufficiently verify users permissions, which leads to anonymous users being able to upload files to the server.
- Record
DRUPAL-CONTRIB-2018-014- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
drupal/ckeditor_uploadimagePackagist:https://packages.drupal.org/8 |
before 1.5.0 | 1.5.0 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
DRUPAL-CONTRIB-2018-014 is a vulnerability with no CVSS score yet in drupal/ckeditor_uploadimage, published February 21, 2018. No source lists public exploit code. Fixed in drupal/ckeditor_uploadimage 1.5.0.