File Entity Project File Entity — known CVE vulnerabilities

Every CVE whose affected-product data names File Entity Project File Entity, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2024-13276 — CVSS 7.5 (high): Insertion of Sensitive Information Into Sent Data vulnerability in Drupal File Entity (fieldable files) allows Forceful Browsing.This issue…
• CVE-2024-13237 — CVSS 5.4 (medium): Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal File Entity (fieldable files)…