Project: 
Taxonomy File Tree
Date: 
2018-September-26
Security risk: 
Moderately critical 13∕25 AC:Basic/A:None/CI:Some/II:None/E:Theoretical/TD:All
Vulnerability: 
Access bypass
Description: 

Taxonomy File Tree allows site managers to create file trees.

For files managed as Drupal files, the module does not properly check that a user has access to a file before letting the user download the file.

This vulnerability only affects sites that use private files.

Solution: 

Install the latest version:

Also see the Taxonomy File Tree project page.

Reported By: 
Fixed By: 
Coordinated By: