CVE-2024-13303
CVE-2024-13303 · Download All Files - Critical - Access bypass - SA-CONTRIB-2024-069
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Missing Authorization vulnerability in Drupal Download All Files allows Forceful Browsing.This issue affects Download All Files: from 0.0.0 before 2.0.2.
CVSS 5.3 · Medium · EPSS 0.3% · Fix available
- Published
- Updated
Stack: php
Affected products and versions
download all files
- Versions
- ≥ 0.0.0, < 2.0.2: Affected (semver)
Update to 2.0.2
drupal/download_all_files Packagist:https://packages.drupal.org/8
- Affected ranges
- ECOSYSTEM: < 2.0.2
Update to 2.0.2