CVE-2024-13311

The Allow All File Extensions for file fields module in the Drupal CMS is vulnerable to Remote Code Execution (RCE) due to insufficient input validation. This flaw allows a malicious actor to bypass security controls and execute arbitrary code remotely, potentially through unrestricted file uploa...