CVE-2024-13276CWE-201

File Entity (fieldable files) - Moderately critical - Information Disclosure - SA-CONTRIB-2024-040

High · published January 9, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
30.6
In the wild
Unconfirmed
What it is

Insertion of Sensitive Information Into Sent Data vulnerability in Drupal File Entity (fieldable files) allows Forceful Browsing.This issue affects File Entity (fieldable files): from 7.X-* before 7.X-2.39.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00379 · 30.6th percentile
Weakness
CWE-201 · Insertion of Sensitive Information Into Sent Data
Published
2025-01-09T19:28Z
EPSS history
Timeline
  • 09 JAN 19:28Z
    File Entity (fieldable files) - Moderately critical - Information Disclosure - SA-CONTRIB-2024-040
    cvelistv5