Lucene search

Cross-Site Request Forgery in Filebrowser

🗓️ 05 Feb 2022 00:31:00Reported by GitHub Advisory DatabaseType

Filebrowser CSRF vulnerability allows creation of admin backdoor

Reporter	Title	Published	Views	Family All 13
OSV	Cross-site request forgery in github.com/filebrowser/filebrowser/v2	5 Feb 202200:00	–	osv
OSV	CVE-2021-46398	4 Feb 202216:15	–	osv
OSV	Cross-Site Request Forgery in Filebrowser	5 Feb 202200:00	–	osv
NVD	CVE-2021-46398	4 Feb 202216:15	–	nvd
0day.today	FileBrowser 2.17.2 - Cross Site Request Forgery to Remote Code Execution Vulnerability	8 Feb 202200:00	–	zdt
Cvelist	CVE-2021-46398	4 Feb 202215:05	–	cvelist
CVE	CVE-2021-46398	4 Feb 202216:15	–	cve
Prion	Cross site request forgery (csrf)	4 Feb 202216:15	–	prion
Veracode	Cross-site Request Forgery (CSRF)	7 Feb 202205:38	–	veracode
GithubExploit	Exploit for Cross-Site Request Forgery (CSRF) in Filebrowser	3 Jan 202309:49	–	githubexploit

Vulners

Node

filebrowser filebrowserRange<2.18.0

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-46398
github	www.github.com/filebrowser/filebrowser/commit/74b7cd8e81840537a8206317344f118093153e8d
febin0x4e4a	www.febin0x4e4a.blogspot.com/2022/01/critical-csrf-in-filebrowser.html
systemweakness	www.systemweakness.com/critical-csrf-to-rce-in-filebrowser-865a3c34b8e7
packetstormsecurity	www.packetstormsecurity.com/files/165885/FileBrowser-2.17.2-Code-Execution-Cross-Site-Request-Forgery.html
febinj	www.febinj.medium.com/critical-csrf-to-rce-in-filebrowser-865a3c34b8e7
github	www.github.com/filebrowser/filebrowser/issues/1621
pkg	www.pkg.go.dev/vuln/GO-2022-0563
febin0x4e4a	www.febin0x4e4a.wordpress.com/2022/01/19/critical-csrf-in-filebrowser
github	www.github.com/advisories/GHSA-72wf-hwcq-65h9

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

05 Feb 2022 00:00Current

5.6Medium risk

Vulners AI Score5.6

CVSS26.8

CVSS38.8

EPSS0.01505

CWE-352