CVE-2022-39833

HIGH 7.2CVE-2022-39833 · Published 23/11/2022 · updated 17/06/2026

In short

CVE-2022-39833 is a HIGH (CVSS 7.2) vulnerability affecting filecloud (filecloud).
Chance of exploitation in the next 30 days (EPSS): 2.9%, higher than 86.9% of all vulnerabilities.
Fix: update to 21.3.7.18607 or later.

Package	Affected versions	Patched versions
filecloud filecloud	`≥ 20.2, < 21.3.7.18607`	`21.3.7.18607`

Description

FileCloud Versions 20.2 and later allows remote attackers to potentially cause unauthorized remote code execution and access to reported API endpoints via a crafted HTTP request.

References

gist.github.com/DylanGrl/4b4e0d53bb7626b2ab3f834ec5a2b23c · Exploit
filecloud.com/supportdocs/fcdoc/latest/server/security-advisories/2022-security-advisories/advisory-2022-10-01-unauthorized-access-and-potential-remote-code-execution · Vendor Advisory

More vulnerabilities in filecloud

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

filecloud

≥ 20.2, < 21.3.7.18607

21.3.7.18607

More vulnerabilities in filecloud

See all →