VYPR

Filebrowser

by Filebrowser Project

CVEs (1)

  • CVE-2021-37794MedAug 31, 2021
    risk 0.00cvss 5.4epss 0.01

    A stored cross-site scripting (XSS) vulnerability exists in FileBrowser < v2.16.0 that allows an authenticated user authorized to upload a malicious .svg file which acts as a stored XSS payload. If this stored XSS payload is triggered by an administrator it will trigger…