Project: 
CKEditor Upload Image
Project machine name: 
ckeditor_uploadimage
Date: 
2018-February-21
Security risk: 
Critical 15 ∕ 25 AC:None/A:None/CI:None/II:Some/E:Theoretical/TD:All
Vulnerability: 
Access bypass
Affected versions: 
<1.5.0
Description: 

This module enables you to drag and drop or paste images into CKEditor.
The module does not sufficiently verify users permissions, which leads to anonymous users being able to upload files to the server.

Solution: 

Install the latest version:

Reported By: 
Fixed By: 
Coordinated By: