CVE-2022-25241

Mô tả

Tham khảo

• packetstormsecurity.com/files/166074/FileCloud-21.2-Cross-Site-Request-Forgery.html · Exploit
• herolab.usd.de/security-advisories · Third Party Advisory
• filecloud.com/supportdocs/display/cloud/Advisory+2022-01-3+Threat+of+CSRF+via+User+Creation · Vendor Advisory

Lỗ hổng khác của filecloud

• CVE-2022-39833CAO 7.2FileCloud Versions 20.2 and later allows remote attackers to potentially cause unauthorized remote code execution and access to reported API…
• CVE-2022-1958TRUNG BÌNH 6.5A vulnerability classified as critical has been found in FileCloud. Affected is an unknown function of the component NTFS Handler. The manip…
• CVE-2022-24633TRUNG BÌNH 5.3All versions of FileCloud prior to 21.3 are vulnerable to user enumeration. The vulnerability exists in the parameter "path" passing "/SHARE…
• CVE-2022-25242CAO 8.8In FileCloud before 21.3, file upload is not protected against Cross-Site Request Forgery (CSRF).
• CVE-2020-26524TRUNG BÌNH 5.3CodeLathe FileCloud before 20.2.0.11915 allows username enumeration.