Vulnerabilities

TI-2010-01875 CVE-2010-1958 · GHSA-h6v7-5393-j43m

Cross-site scripting (XSS) vulnerability in the FileField module 5.x before 5.x-2.5 and…

LOW 13

Cross-site scripting (XSS) vulnerability in the FileField module 5.x before 5.x-2.5 and 6.x before 6.x-3.4 for Drupal allows remote authenticated users, with create or edit permissions and 'Path to File' or 'URL to File'…

CVSS 2.0LOW 2.1 Network Low privileges Interaction — EPSS 0.01006 Published 2010-06-21 No fix listed CWE-79

TI-2009-03591 CVE-2009-3781 · GHSA-wpp8-x44c-v39q

The filefield_file_download function in FileField 6.x-3.1, a module for Drupal, does not…

LOW 37

The filefield_file_download function in FileField 6.x-3.1, a module for Drupal, does not properly check node-access permissions for Drupal core private files, which allows remote attackers to access unauthorized files vi…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02163 Published 2009-10-26 No fix listed CWE-862

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in the FileField module 5.x before 5.x-2.5 and…

The filefield_file_download function in FileField 6.x-3.1, a module for Drupal, does not…