https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-19T12:24:39.322564+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-01028 bdu:2025-01028 2026-10-19T12:24:39.326070+00:00 bdu:2025-01028 https://cve.radiocsirt.org/vuln/drupal-contrib-2024-059 DRUPAL-CONTRIB-2024-059 2026-10-19T12:24:39.326108+00:00

Affected: Packagist:https://packages.drupal.org/8: drupal/postfile

The module creates an endpoint on the site at /postfile/upload that accepts a POST request for uploading a single file into a specified file system (public, private, etc).

The module doesn't sufficiently protect against Cross Site Request Forgery under allowing an attacker to trick a site user into uploading a file.

 https://cve.radiocsirt.org/vuln/euvd-2026-210080 EUVD-2026-210080 2026-10-19T12:24:39.326145+00:00 EUVD-2026-210080 https://cve.radiocsirt.org/vuln/fkie_cve-2024-13293 fkie_cve-2024-13293 2026-10-19T12:24:39.326157+00:00

Cross-Site Request Forgery (CSRF) vulnerability in Drupal POST File allows Cross Site Request Forgery.This issue affects POST File: from 0.0.0 before 1.0.2.

 https://cve.radiocsirt.org/vuln/ghsa-p77c-g2ff-r9hf GHSA-p77c-g2ff-r9hf 2026-10-19T12:24:39.326178+00:00

Cross-Site Request Forgery (CSRF) vulnerability in Drupal POST File allows Cross Site Request Forgery.This issue affects POST File: from 0.0.0 before 1.0.2.