CVE-2025-7717

Missing Authorization vulnerability in Drupal File Download allows Forceful Browsing.This issue affects File Download: from 0.0.0 before 1.9.0, from 2.0.0 before 2.0.1...

CVE-2025-7717

The Drupal File Download module is vulnerable to a missing authorization issue, which enables forceful browsing . The flaw stems from a failure to properly validate input when handling file access requests, allowing unauthenticated users to bypass protections and access private files that should ...

Drupal File Download 安全漏洞

Drupal File Download is a file download plugin for the Drupal community. A security vulnerability exists in Drupal File Download versions prior to 1.9.0 and prior to 2.0.1, which stems from a lack of authorization and could lead to a forced browsing attack...

PT-2025-30312 · Drupal · Drupal File Download

Name of the Vulnerable Software and Affected Versions: Drupal File Download versions 0.0.0 through 1.8.9 Drupal File Download versions 2.0.0 through 2.0.0 Description: The File Download module is susceptible to a missing authorization issue, allowing for forceful browsing. Recommendations: Update...

Drupal File Download module < 1.9.0,2.0.0 - Unauthenticated Broken Access Control vulnerability

Unauthenticated Broken Access Control vulnerability discovered by Willem Drupal enthousiast willempje2 in WordPress Module File Download versions 1.9.0,2.0.0...