CVE-2025-46093

概要

参考情報

• docs.liquidfiles.com/release_notes/version_4-1-x.html · Release Notes
• gist.github.com/nikolai0x/f61a8bfcdaa244e0c46931d74d10c4ea · Third Party Advisory
• projectblack.io/blog/liquidfiles-vulnerability-authenticated-rce · Exploit

liquidfiles のその他の脆弱性

• CVE-2025-56132高 7.3LiquidFiles filetransfer server is vulnerable to a user enumeration issue in its password reset functionality. The application returns disti…
• CVE-2025-46094低 3.8LiquidFiles before 4.1.2 allows directory traversal by configuring the pathname of a local executable file as an Actionscript.
• CVE-2023-4393中 6.1HTML and SMTP injections on the registration page of LiquidFiles versions 3.7.13 and below, allow an attacker to perform more advanced phish…
• CVE-2021-43397高 8.8LiquidFiles before 3.6.3 allows remote attackers to elevate their privileges from Admin (or User Admin) to Sysadmin.
• CVE-2021-30140中 5.4LiquidFiles 3.4.15 has stored XSS through the "send email" functionality when sending a file via email to an administrator. When a file has …