CVE-2022-1958

概要

参考情報

• vuldb.com · Third Party Advisory
• vuldb.com · Third Party Advisory
• filecloud.com/supportdocs/fcdoc/2v/server/security-advisories/2022-security-advisories/advisory-2022-06-01-potential-unauthorized-data-access-when-using-network-folders-with-ntfs-permissions · Vendor Advisory
• scip.ch · Third Party Advisory

filecloud のその他の脆弱性

• CVE-2022-39833高 7.2FileCloud Versions 20.2 and later allows remote attackers to potentially cause unauthorized remote code execution and access to reported API…
• CVE-2022-24633中 5.3All versions of FileCloud prior to 21.3 are vulnerable to user enumeration. The vulnerability exists in the parameter "path" passing "/SHARE…
• CVE-2022-25242高 8.8In FileCloud before 21.3, file upload is not protected against Cross-Site Request Forgery (CSRF).
• CVE-2022-25241高 8.8In FileCloud before 21.3, the CSV user import functionality is vulnerable to Cross-Site Request Forgery (CSRF).
• CVE-2020-26524中 5.3CodeLathe FileCloud before 20.2.0.11915 allows username enumeration.