https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 11:23:58 +0000 https://cve.radiocsirt.org/vuln/drupal-contrib-2025-089 <p><strong>Affected:</strong> Packagist:https://packages.drupal.org/8: drupal/file_download</p> <p>The File Download enables you to allow users to download file and image entities directly using a custom field formatter. It also provides an optional submodule to count and display file downloads in Views, similar to how the core statistics module tracks content views.</p> <p>The File Download module does not properly validate input when handling file access requests. This can allow users to bypass protections and access private files that should not be publicly available.</p> <p><strong>Affected:</strong> Packagist:https://packages.drupal.org/8: drupal/file_download</p> <p>The File Download enables you to allow users to download file and image entities directly using a custom field formatter. It also provides an optional submodule to count and display file downloads in Views, similar to how the core statistics module tracks content views.</p> <p>The File Download module does not properly validate input when handling file access requests. This can allow users to bypass protections and access private files that should not be publicly available.</p> https://cve.radiocsirt.org/vuln/drupal-contrib-2025-089 https://cve.radiocsirt.org/vuln/euvd-2026-248094 EUVD-2026-248094 https://cve.radiocsirt.org/vuln/euvd-2026-248094 https://cve.radiocsirt.org/vuln/fkie_cve-2025-7717 <p>Missing Authorization vulnerability in Drupal File Download allows Forceful Browsing.This issue affects File Download: from 0.0.0 before 1.9.0, from 2.0.0 before 2.0.1.</p> <p>Missing Authorization vulnerability in Drupal File Download allows Forceful Browsing.This issue affects File Download: from 0.0.0 before 1.9.0, from 2.0.0 before 2.0.1.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-7717 https://cve.radiocsirt.org/vuln/ghsa-444f-w9rc-6jxq <p>Missing Authorization vulnerability in Drupal File Download allows Forceful Browsing.This issue affects File Download: from 0.0.0 before 1.9.0, from 2.0.0 before 2.0.1.</p> <p>Missing Authorization vulnerability in Drupal File Download allows Forceful Browsing.This issue affects File Download: from 0.0.0 before 1.9.0, from 2.0.0 before 2.0.1.</p> https://cve.radiocsirt.org/vuln/ghsa-444f-w9rc-6jxq https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1587 <p>Ein entfernter anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um einen Cross-Site-Scripting-Angriff zu starten und die Sicherheitsmaßnahmen zu umgehen.</p> <p>Ein entfernter anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um einen Cross-Site-Scripting-Angriff zu starten und die Sicherheitsmaßnahmen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1587