CVE-2022-39833

概要

参考情報

• gist.github.com/DylanGrl/4b4e0d53bb7626b2ab3f834ec5a2b23c · Exploit
• filecloud.com/supportdocs/fcdoc/latest/server/security-advisories/2022-security-advisories/advisory-2022-10-01-unauthorized-access-and-potential-remote-code-execution · Vendor Advisory

filecloud のその他の脆弱性

• CVE-2022-1958中 6.5A vulnerability classified as critical has been found in FileCloud. Affected is an unknown function of the component NTFS Handler. The manip…
• CVE-2022-24633中 5.3All versions of FileCloud prior to 21.3 are vulnerable to user enumeration. The vulnerability exists in the parameter "path" passing "/SHARE…
• CVE-2022-25242高 8.8In FileCloud before 21.3, file upload is not protected against Cross-Site Request Forgery (CSRF).
• CVE-2022-25241高 8.8In FileCloud before 21.3, the CSV user import functionality is vulnerable to Cross-Site Request Forgery (CSRF).
• CVE-2020-26524中 5.3CodeLathe FileCloud before 20.2.0.11915 allows username enumeration.