—
DRUPAL-CONTRIB-2024-069
Details
This module provides a field formatter for the field type 'file' called `Table of files with download all link` .
The module had vulnerabilities allowing a user to download files they normally should not be able to download.
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist:https://packages.drupal.org/8/drupal/download_all_files
Introduced in:
0Fixed in: 2.0.2Upgrade drupal/download_all_files to 2.0.2 or newer (ecosystem packagist:https://packages.drupal.org/8).