File Entity Fieldable Files (Drupal) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2025-01-09. Vendor: Drupal.

CVEs of File Entity Fieldable Files

• CVE-2024-13276 - CVSS 7.5 (high), 2025-01-09: Insertion of Sensitive Information Into Sent Data vulnerability in Drupal File Entity (fieldable files) allows Forceful Browsing.This issue affects File…
• CVE-2024-13237 - CVSS 5.4 (medium), 2025-01-09: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal File Entity (fieldable files) allows Cross-Site…