description: Vulnerability in avatar_uploader v7.x-1.0-beta8 , The code in view.php doesn't verify users or sanitize the file path.
problem types: Arbitrary file download vulnerability in Drupal module avatar_uploader v7.x-1.0-beta8
affected:
{
product: avatar_uploader
vendor: Robbin Zhao
versions:
lessThan: 7.x-1.0-beta8, status: affected, version: unspecified, versionType: custom
}