—

DRUPAL-CONTRIB-2018-014

Details

This module enables you to drag and drop or paste images into CKEditor. The module does not sufficiently verify users permissions, which leads to anonymous users being able to upload files to the server.

Are you affected?

Enter the version of the package you're using.

Affected packages

Packagist:https://packages.drupal.org/8/drupal/ckeditor_uploadimage

Introduced in: 0Fixed in: 1.5.0

Upgrade drupal/ckeditor_uploadimage to 1.5.0 or newer (ecosystem packagist:https://packages.drupal.org/8).

References

https://www.drupal.org/sa-contrib-2018-014[WEB]