CVE-2024-13303

This module provides a field formatter for the field type 'file' called `Table of files with download all link` . The module had vulnerabilities allo...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

This module provides a field formatter for the field type 'file' called Table of files with download all link .

The module had vulnerabilities allowing a user to download files they normally should not be able to download.

出典: OSV.dev (Open Source Vulnerabilities) NVD OSV

Packagist:https://packages.drupal.org/8 drupal/download_all_files

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.2"}],"database_specific":{"constraint":"<2.0.2"}}]