Skip to content
OpenAdvisories

Product · Drupal

Drupal File (Field) Paths

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.9
    CVE-2026-1556

    Information disclosure via file URI overwrite in File (Field) Paths

    Information disclosure in the file URI processing of File (Field) Paths in Drupal File (Field) Paths 7.x prior to 7.1.3 on Drupal 7.x allows authenticated users to disclose other users’ private files via filename‑collision uploads. This can cause hook_node_in…

    Drupal Drupal File (Field) Paths drupal7 Web / CMS Ubuntu