AIKIDO-2026-338947
drupal/media_library_importer is vulnerable to Path Traversal
50
Medium Risk
This Affects:
drupal/media_library_importerTL;DR
A path traversal/access control vulnerability in the media import module allows an attacker to import files from arbitrary directories readable by the web server. Files from private or otherwise protected storage may be copied to the public files directory and exposed to unauthenticated users through predictable URLs.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range.
Background info
drupal/media_library_importer is vulnerable to Path Traversal in versions 0.0.1 - 2.1.5.
How to fix this
Upgrade the drupal/media_library_importer library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.