CVE-2022-24633

2022-02-2212:33:30

mitre

www.cve.org

filecloud

user enumeration

vulnerability

AI Score

5.4

Confidence

High

EPSS

0.001

Percentile

31.3%

JSON

All versions of FileCloud prior to 21.3 are vulnerable to user enumeration. The vulnerability exists in the parameter “path” passing “/SHARED/<username>”. A malicious actor could identify the existence of users by requesting share information on specified share paths.