CVE-2025-7717
File Download - Moderately critical - Access bypass - SA-CONTRIB-2025-089
Missing Authorization vulnerability in Drupal File Download allows Forceful Browsing.This issue affects File Download: from 0.0.0 before 1.9.0, from 2.0.0 before 2.0.1.
CVSS 3.1 · 7.5 High
EPSS < 1%
KEV · Not listed
Vendors
Products