Lucene search

9A44B4EF-D699-583F-A952-0306CCF44B17

HistoryJan 03, 2023 - 9:49 a.m.

Exploit for Cross-Site Request Forgery (CSRF) in Filebrowser

2023-01-0309:49:22

filebrowser

csrf

rce

vulnerability

docker

security flaw

poc

exploitation

impact

web interface

json

http

origin

anti-csrf tokens

admin privileges

backdoor user

filesystem

sequence diagram

demonstration

docker container

architecture

technical aspect

exploit

malicious webpage

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

0.007 Low

EPSS

Percentile

79.5%

JSON

CVE-2021-46398 - Lalie ARNOUD, Gaspard ANDRIEU

In this reposi…

This is an article that belongs to githubexploit private collection.
Please sign in to get more Information.

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

0.007 Low

EPSS

Percentile

79.5%

JSON

Related for 9A44B4EF-D699-583F-A952-0306CCF44B17