CVE-2024-13276

Insertion of Sensitive Information Into Sent Data vulnerability in Drupal File Entity fieldable files allows Forceful Browsing.This issue affects File Entity fieldable files: from 7.X- before 7.X-2.39...

CVE-2024-13276

creationtimestamp| type| source ---|---|--- 2025-01-09 19:33:37+00:00| seen| https://infosec.exchange/users/cve/statuses/113800066948393639 2025-01-09 20:16:36+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdinv6eck2e 2025-01-10 17:04:37+00:00| seen|...

CVE-2024-13276 File Entity (fieldable files) - Moderately critical - Information Disclosure - SA-CONTRIB-2024-040

Insertion of Sensitive Information Into Sent Data vulnerability in Drupal File Entity fieldable files allows Forceful Browsing.This issue affects File Entity fieldable files: from 7.X- before 7.X-2.39...

CVE-2024-13276

The File Entity (fieldable files) module in the Drupal CMS (versions 7.X-* before 7.X-2.39) is vulnerable to Forceful Browsing due to an Insertion of Sensitive Information Into Sent Data issue. The root cause is that the module fails to verify the existence of folders within the private destinati...