Drupal Download All Files Missing Authorization Vulnerability Allowing Forceful Browsing
Vulnerability
A missing authorization vulnerability has been identified in the Drupal Download All Files module, versions prior to 2.0.2. This vulnerability allows for forceful browsing, enabling users to download files they should not have access to.
Impact
Exploitation of this vulnerability could lead to unauthorized file downloads, allowing users to access files they are not permitted to.
Remediation
Users of the Download All Files module should upgrade to version 2.0.2.
Added: Sep 1, 2025, 7:22 PM
Updated: Sep 1, 2025, 7:22 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
2.5exploitability
7.4remediation
7.7relevance
0.0threat
0.0urgency
2.9incentive
5.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.