Threats tagged 'drupal-contrib-2026-331'

The Drupal download_count module has a vulnerability where permissions related to viewing download counts are not properly enforced. A user with the 'View download counts' permission can export and delete download logs, despite these actions not being intended for that permission level. Exploitation requires the attacker to have an account with this specific permission.