CVE-2024-13311

—

CVSS 3.1

7.3 high

EPSS

<1%p28

Published

Jan 9, 2025 (Jan 9, 2025)

Modified

Jun 17, 2026

Description

Vulnerability in Drupal Allow All File Extensions for file fields.This issue affects Allow All File Extensions for file fields: *.*.

Vendors: allow all file extensions for file fields project
Products: allow all file extensions for file fields
Ecosystems: Drupal
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.