CVE-2020-26524

Description

References

• lukaszstu/filecloud-UE-CVE-2020-26524 · Broken Link
• filecloud.com/releasenotes · Release Notes
• getfilecloud.com/releasenotes · Release Notes

More vulnerabilities in filecloud

• CVE-2022-39833HIGH 7.2FileCloud Versions 20.2 and later allows remote attackers to potentially cause unauthorized remote code execution and access to reported API…
• CVE-2022-1958MEDIUM 6.5A vulnerability classified as critical has been found in FileCloud. Affected is an unknown function of the component NTFS Handler. The manip…
• CVE-2022-24633MEDIUM 5.3All versions of FileCloud prior to 21.3 are vulnerable to user enumeration. The vulnerability exists in the parameter "path" passing "/SHARE…
• CVE-2022-25242HIGH 8.8In FileCloud before 21.3, file upload is not protected against Cross-Site Request Forgery (CSRF).
• CVE-2022-25241HIGH 8.8In FileCloud before 21.3, the CSV user import functionality is vulnerable to Cross-Site Request Forgery (CSRF).