CVE-2012-4495

CVE-2012-4495 describes an access restriction bypass vulnerability in the Mime Mail module 6.x-1.x before 6.x-1.1 for Drupal. This flaw allows authenticated users to attach arbitrary files located outside Drupal's public files directory to emails. With a CVSS score of 4.0 (medium severity), the vulnerability has a network attack vector, low attack complexity, and a potential impact of modifying data (sending unauthorized attachments). There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.