[HIGH] Editor module incorrectly checks access to inline private files

PKSA-kgj1-j6gn-hqx6 CVE-2017-6377 GHSA-w7qx-vwr9-2j3r

Affected package: drupal/drupal

Affected version: >=8.0,<8.1.0|>=8.1.0,<8.2.0|>=8.2.0,<8.2.7

Reported by:
FriendsOfPHP/security-advisories, GitHub