CVE-2025-7717

The Drupal File Download module is vulnerable to a missing authorization issue, which enables forceful browsing . The flaw stems from a failure to properly validate input when handling file access requests, allowing unauthenticated users to bypass protections and access private files that should ...