Filecloud

filecloud

7 CVEs • 1 product

Products (1)

Click to collapse

Toggle

CVEs (7)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-39833 1Filecloud 1Filecloud Apr 25, 2025 Nov 23, 2022 N/A· v4 7.2 HIGH· v3 N/A· v2 FileCloud Versions 20.2 and later allows remote attackers to potentially cause unauthorized remote code execution and access to reported API endpoints via a crafted HTTP request.
CVE-2022-1958 1Filecloud 1Filecloud Nov 21, 2024 Jun 15, 2022 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 A vulnerability classified as critical has been found in FileCloud. Affected is an unknown function of the component NTFS Handler. The manipulation leads to improper access controls. It is possible to launch the attack r...Show more A vulnerability classified as critical has been found in FileCloud. Affected is an unknown function of the component NTFS Handler. The manipulation leads to improper access controls. It is possible to launch the attack remotely. Upgrading to version 21.3.5.18513 is able to address this issue. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-201960.Show less
CVE-2022-24633 1Filecloud 1Filecloud Nov 21, 2024 Feb 24, 2022 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 All versions of FileCloud prior to 21.3 are vulnerable to user enumeration. The vulnerability exists in the parameter "path" passing "/SHARED/<username>". A malicious actor could identify the existence of users by reques...Show more All versions of FileCloud prior to 21.3 are vulnerable to user enumeration. The vulnerability exists in the parameter "path" passing "/SHARED/<username>". A malicious actor could identify the existence of users by requesting share information on specified share paths.Show less
CVE-2022-25242 1Filecloud 1Filecloud Nov 21, 2024 Feb 16, 2022 N/A· v4 8.8 HIGH· v3 5.1 MEDIUM· v2 In FileCloud before 21.3, file upload is not protected against Cross-Site Request Forgery (CSRF).
CVE-2022-25241 1Filecloud 1Filecloud Nov 21, 2024 Feb 16, 2022 N/A· v4 8.8 HIGH· v3 5.1 MEDIUM· v2 In FileCloud before 21.3, the CSV user import functionality is vulnerable to Cross-Site Request Forgery (CSRF).
CVE-2020-26524 1Filecloud 1Filecloud Nov 21, 2024 Oct 2, 2020 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 CodeLathe FileCloud before 20.2.0.11915 allows username enumeration.
CVE-2016-6578 1Filecloud 1Filecloud Nov 21, 2024 Jul 13, 2018 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 CodeLathe FileCloud, version 13.0.0.32841 and earlier, contains a global cross-site request forgery (CSRF) vulnerability. An attacker can perform actions with the same permissions as a victim user, provided the victim ha...Show more CodeLathe FileCloud, version 13.0.0.32841 and earlier, contains a global cross-site request forgery (CSRF) vulnerability. An attacker can perform actions with the same permissions as a victim user, provided the victim has an active session and is induced to trigger the malicious request.Show less