Allocation of Resources Without Limits or Throttling vulnerability in Drupal Stage File Proxy allows Flooding.This issue affects Stage File Proxy: from 0.0.0 before 3.1.5.
CVSS 3.1MEDIUM 5.9·Network·No auth·No interaction·EPSS 0.00359·Published 2025-04-16·Fixed in 3.1.5CWE-770
The Stage File Proxy module 7.x-1.x before 7.x-1.4 for Drupal allows remote attackers to cause a denial of service (file operations performance degradation and failure) via a large number of requests.