FileCloud
Products
1- 7 CVEs
Recent CVEs
7| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2022-25241 | Hig | 0.60 | 8.8 | 0.03 | Feb 16, 2022 | In FileCloud before 21.3, the CSV user import functionality is vulnerable to Cross-Site Request Forgery (CSRF). | ||
| CVE-2022-25242 | Hig | 0.57 | 8.8 | 0.00 | Feb 16, 2022 | In FileCloud before 21.3, file upload is not protected against Cross-Site Request Forgery (CSRF). | ||
| CVE-2022-39833 | Hig | 0.47 | 7.2 | 0.03 | Nov 23, 2022 | FileCloud Versions 20.2 and later allows remote attackers to potentially cause unauthorized remote code execution and access to reported API endpoints via a crafted HTTP request. | ||
| CVE-2022-1958 | Med | 0.41 | 6.3 | 0.01 | Jun 15, 2022 | A vulnerability classified as critical has been found in FileCloud. Affected is an unknown function of the component NTFS Handler. The manipulation leads to improper access controls. It is possible to launch the attack remotely. Upgrading to version 21.3.5.18513 is able to… | ||
| CVE-2022-24633 | Med | 0.35 | 5.3 | 0.01 | Feb 24, 2022 | All versions of FileCloud prior to 21.3 are vulnerable to user enumeration. The vulnerability exists in the parameter "path" passing "/SHARED/". A malicious actor could identify the existence of users by requesting share information on specified share paths. | ||
| CVE-2020-26524 | Med | 0.35 | 5.3 | 0.01 | Oct 2, 2020 | CodeLathe FileCloud before 20.2.0.11915 allows username enumeration. | ||
| CVE-2025-26127 | Med | 0.33 | 5.0 | 0.00 | Mar 17, 2025 | A stored cross-site scripting (XSS) vulnerability in the Send for Approval function of FileCloud v23.241.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. |
- risk 0.60cvss 8.8epss 0.03
In FileCloud before 21.3, the CSV user import functionality is vulnerable to Cross-Site Request Forgery (CSRF).
- risk 0.57cvss 8.8epss 0.00
In FileCloud before 21.3, file upload is not protected against Cross-Site Request Forgery (CSRF).
- risk 0.47cvss 7.2epss 0.03
FileCloud Versions 20.2 and later allows remote attackers to potentially cause unauthorized remote code execution and access to reported API endpoints via a crafted HTTP request.
- risk 0.41cvss 6.3epss 0.01
A vulnerability classified as critical has been found in FileCloud. Affected is an unknown function of the component NTFS Handler. The manipulation leads to improper access controls. It is possible to launch the attack remotely. Upgrading to version 21.3.5.18513 is able to…
- risk 0.35cvss 5.3epss 0.01
All versions of FileCloud prior to 21.3 are vulnerable to user enumeration. The vulnerability exists in the parameter "path" passing "/SHARED/". A malicious actor could identify the existence of users by requesting share information on specified share paths.
- risk 0.35cvss 5.3epss 0.01
CodeLathe FileCloud before 20.2.0.11915 allows username enumeration.
- risk 0.33cvss 5.0epss 0.00
A stored cross-site scripting (XSS) vulnerability in the Send for Approval function of FileCloud v23.241.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.