File Download Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

File Download Project records in CISA KEV

No File Download Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

File Download 1 record LOW

Records

1 record

TI-2025-07043 CVE-2025-7717 · GHSA-444f-w9rc-6jxq

File Download - Moderately critical - Access bypass - SA-CONTRIB-2025-089

LOW 39

Missing Authorization vulnerability in Drupal File Download allows Forceful Browsing.This issue affects File Download: from 0.0.0 before 1.9.0, from 2.0.0 before 2.0.1.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0041 Published 2025-07-21 Fixed in 1.9.0, 2.0.1 CWE-862

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0