system
Describe <CVE-2017-6377>.
user
What is <CVE-2017-6377>?
assistant
When adding a private file via the editor in Drupal 8.2.x before 8.2.7, the editor will not correctly check access for the file being attached, resulting in an access bypass..