CVE-2022-25242

Description

References

• herolab.usd.de/security-advisories · Third Party Advisory
• filecloud.com/supportdocs/display/cloud/Advisory+2022-01-2+Threat+of+CSRF+via+File+Upload · Vendor Advisory

Más vulnerabilidades de filecloud

• CVE-2022-39833ALTO 7.2FileCloud Versions 20.2 and later allows remote attackers to potentially cause unauthorized remote code execution and access to reported API…
• CVE-2022-1958MEDIO 6.5A vulnerability classified as critical has been found in FileCloud. Affected is an unknown function of the component NTFS Handler. The manip…
• CVE-2022-24633MEDIO 5.3All versions of FileCloud prior to 21.3 are vulnerable to user enumeration. The vulnerability exists in the parameter "path" passing "/SHARE…
• CVE-2022-25241ALTO 8.8In FileCloud before 21.3, the CSV user import functionality is vulnerable to Cross-Site Request Forgery (CSRF).
• CVE-2020-26524MEDIO 5.3CodeLathe FileCloud before 20.2.0.11915 allows username enumeration.