Em resumo
- CVE-2021-46398 é uma vulnerabilidade ALTO (CVSS 8.8) que afeta github.com/filebrowser/filebrowser/v2, filebrowser (filebrowser).
- Chance de exploração nos próximos 30 dias (EPSS): 6.7%, maior que 93.9% das vulnerabilidades.
- Correção: atualize para 2.18.0 ou posterior.
Description
A Cross-Site Request Forgery (CSRF) vulnerability exists in Filebrowser < 2.18.0 that allows attackers to create a backdoor user with admin privilege and get access to the filesystem via a malicious HTML webpage that is sent to the victim.
NVD description
A Cross-Site Request Forgery vulnerability exists in Filebrowser < 2.18.0 that allows attackers to create a backdoor user with admin privilege and get access to the filesystem via a malicious HTML webpage that is sent to the victim. An admin can run commands using the FileBrowser and hence it leads to RCE.
Mais vulnerabilidades de github.com/filebrowser/filebrowser/v2
Ver tudo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free