CVE-2014-5020

CVE-2014-5020 describes a vulnerability in the File module of Drupal 7.x before version 7.29, allowing authenticated users with specific permissions to bypass intended access controls and read files by attaching them to content with a file field. This medium-severity vulnerability has a CVSS score of 4.9, indicating a network-based attack requiring medium complexity and user authentication, with potential for partial confidentiality and integrity impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.