The Stage File Proxy module 7.x-1.x before 7.x-1.4 for Drupal allows remote attackers to cause a denial of service (file operations performance degradation and failure) via a large number of requests.
https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-4066
https://drupal.org/node/2038801