high8.8
CVE-2022-25242
In FileCloud before 21.3, file upload is not protected against Cross-Site Request Forgery (CSRF).
Impact
In FileCloud before 21.3, file upload is not protected against Cross-Site Request Forgery (CSRF).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Filecloud | Filecloud | before 21.3.0.18447 |
Weakness classification
References
- NVD record
- CVE.org record
- https://herolab.usd.de/security-advisories/
- https://www.filecloud.com/supportdocs/display/cloud/Advisory+2022-01-2+Threat+of+CSRF+via+File+Upload
- https://herolab.usd.de/security-advisories/
- https://www.filecloud.com/supportdocs/display/cloud/Advisory+2022-01-2+Threat+of+CSRF+via+File+Upload