Drupal File Entity (Fieldable Files) vulnerabilities

2 vulnerabilities

Known vulnerabilities in Drupal File Entity (Fieldable Files), newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.5CVE-2024-13276drupalfile entity (fieldable files)+1
EPSS score
0.38%
Insertion of Sensitive Information Into Sent Data vulnerability in Drupal File Entity (fieldable files) allows Forceful Browsing.This issue affects File Entity (fieldable files): from 7.X-* before 7.X-2.39.5.4CVE-2024-13237drupalfile entity (fieldable files)+1
EPSS score
0.24%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal File Entity (fieldable files) allows Cross-Site Scripting (XSS).This issue affects File Entity (fieldable files): from 7.X-* before 7.X-2.38.