Install
Works with Drupal: 7.xUsing Composer to manage Drupal site dependencies
Downloads
Download tar.gz
50.91 KB
MD5: 16aae52af0ba29d196bd2afe098678cd
SHA-1: 8f3809a2e651395760216171798f090675eb0744
SHA-256: 3109bd8f074925399497c51b9dc41bffcbe0fe6d1f9fdf55a33a6730f7073b23
Download zip
56.05 KB
MD5: 64faeacbde7f253db0166b8f4050b8cb
SHA-1: b7286048ee16de1eba7c2f13d3248e05d58a2d08
SHA-256: 498d20bd10fa7eb8094399a5c27f66bc771129d01fea500e03b2f2ba8df244ac
Security issues fixed
Release notes
This module enables you to utilize S3-compatible storage as a Drupal filesystem.
The module doesn't sufficiently prevent file access across multiple filesystem schemes stored in the same bucket.
This vulnerability is mitigated by the fact that an attacker must obtain a method to access arbitrary file paths, the site must have public or private takeover enabled, and the file metadata cache must be ignored.
See S3 File System - Moderately critical - Access bypass - SA-CONTRIB-2022-057 for more information.
