Skip to content
OpenAdvisories

Product · Drupal

File Force Download

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.7
    CVE-2026-110176

    File Force Download for Drupal 7 Access Bypass via Unconditional Download Headers

    The File Force Download module for Drupal 7 implements hook_file_download() to add a Content-Disposition header when a file URL carries the download query parameter. In Drupal 7, returning a non-empty header array from that hook is itself a grant of access to…

    Drupal File Force Download Web / CMS