GCVE - cpe:2.3:a:file_entity_project:file_entity:*:*:*:*:*:drupal:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:file_entity_project:file_entity:*:*:*:*:*:drupal:*:*

part: a version: * update: *

Vendor	File Entity Project (`b75e81f1-45b2-59b3-9bc7-4ca9aded59ac`)
Product	File Entity (`2a79970b-7674-5ad2-b39c-68a937f9add3`)
Edition	*
Language	*
Software edition	*
Target software	drupal
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-13276`	vulnerable	2026-06-08 06:25:37.159442	File Entity (fieldable files) - Moderately critical - Information Disclosure - SA-CONTRIB-2024-040 Insertion of Sensitive Information Into Sent Data vulnerability in Drupal File Entity (fieldable files) allows Forceful Browsing.This issue affects File Entity (fieldable files): from 7.X-* before 7.X-2.39. Published: 2025-01-09T19:28:40.601Z Updated: 2025-01-10T16:34:18.557Z Open on db.gcve.eu Reference links https://www.drupal.org/sa-contrib-2024-040	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-13237`	vulnerable	2026-06-08 06:25:37.042611	File Entity (fieldable files) - Moderately critical - Cross Site Scripting, Access bypass - SA-CONTRIB-2024-001 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal File Entity (fieldable files) allows Cross-Site Scripting (XSS).This issue affects File Entity (fieldable files): from 7.X-* before 7.X-2.38. Published: 2025-01-09T18:15:23.691Z Updated: 2025-01-09T20:58:24.055Z Open on db.gcve.eu Reference links https://www.drupal.org/sa-contrib-2024-001	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.