Lucene search

K
osvGoogleOSV:GO-2022-0563
HistoryFeb 05, 2022 - 12:00 a.m.

Cross-site request forgery in github.com/filebrowser/filebrowser/v2

2022-02-0500:00:31
Google
osv.dev
6

8.5 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

79.5%

A Cross-Site Request Forgery vulnerability exists in Filebrowser that allows attackers to create a backdoor user with admin privilege and get access to the filesystem via a malicious HTML webpage that is sent to the victim.

8.5 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

79.5%