CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-7717

Missing Authorization vulnerability in Drupal File Download allows Forceful Browsing.This issue affects File Download: from 0.0.0 before 1.9.0, from 2.0.0 before 2.0.1.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 15.2%

CVSS Severity

CVSS v3 Score 7.5

References

https://www.drupal.org/sa-contrib-2025-089

Products affected by CVE-2025-7717

File Download Project » File Download » Version: 2.0.0

cpe:2.3:a:file_download_project:file_download:2.0.0
File Download Project » File Download » Version: 8.x-1.1

cpe:2.3:a:file_download_project:file_download:8.x-1.1
File Download Project » File Download » Version: 8.x-1.2

cpe:2.3:a:file_download_project:file_download:8.x-1.2
File Download Project » File Download » Version: 8.x-1.3

cpe:2.3:a:file_download_project:file_download:8.x-1.3
File Download Project » File Download » Version: 8.x-1.4

cpe:2.3:a:file_download_project:file_download:8.x-1.4
File Download Project » File Download » Version: 8.x-1.5

cpe:2.3:a:file_download_project:file_download:8.x-1.5
File Download Project » File Download » Version: 8.x-1.6

cpe:2.3:a:file_download_project:file_download:8.x-1.6
File Download Project » File Download » Version: 8.x-1.8

cpe:2.3:a:file_download_project:file_download:8.x-1.8

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-7717

Products

Pricing

Contact Us