Missing Authorization vulnerability in Drupal Download All Files allows Forceful Browsing.This issue affects Download All Files: from 0.0.0 before 2.0.2.
CVSS 3.1MEDIUM 5.3·Network·No auth·No interaction·EPSS 0.00311·Published 2025-01-09·Fixed in 2.0.2CWE-862