[MEDIUM] Private file access bypass.

PKSA-2fpr-5mfr-nmjk CVE-2017-6928 GHSA-66mv-q8r2-hj8w

Affected package: drupal/drupal

Affected version: >=8.0,<8.1.0|>=8.1.0,<8.2.0|>=8.2.0,<8.3.0|>=8.3.0,<8.4.0|>=8.4.0,<8.4.5

Reported by:
FriendsOfPHP/security-advisories, GitHub