CVE-2024-13311

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-13311
Vulnerability in Drupal Allow All File Extensions for file fields.This issue affects Allow All File Extensions for file fields: *.*.

7.3 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.1 / Impact : 5.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://www.drupal.org/sa-contrib-2024-075 Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:allow_all_file_extensions_for_file_fields_project:allow_all_file_extensions_for_file_fields:*:*:*:*:*:drupal:*:*
History

02 Sep 2025, 18:29

Type Values Removed Values Added
References () https://www.drupal.org/sa-contrib-2024-075 - () https://www.drupal.org/sa-contrib-2024-075 - Third Party Advisory
First Time Allow All File Extensions For File Fields Project allow All File Extensions For File Fields
Allow All File Extensions For File Fields Project
CPE cpe:2.3:a:allow_all_file_extensions_for_file_fields_project:allow_all_file_extensions_for_file_fields:*:*:*:*:*:drupal:*:*
CWE NVD-CWE-noinfo

31 Jan 2025, 16:15

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.3
Summary
  • (es) Vulnerabilidad en Drupal Allow All File Extensions para file fields.Este problema afecta a Allow All File Extensions for file fields: *.*.

09 Jan 2025, 21:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-01-09 21:15

Updated : 2025-09-02 18:29

NVD link : CVE-2024-13311

Mitre link : CVE-2024-13311

CVE.ORG link : CVE-2024-13311

JSON object : View

Products Affected

allow_all_file_extensions_for_file_fields_project

  • allow_all_file_extensions_for_file_fields
CWE
NVD-CWE-noinfo