Cross site scripting

2023-12-0601:15:00

PRIOn knowledge base

www.prio-n.com

stored xss

filerun update

injection

javascript

file download

6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.0%

JSON

A Stored XSS issue in shared files download terms in Filerun Update 20220202 allows attackers to inject JavaScript code that is executed when a user follows the crafted share link.

CPENameOperatorVersion
fileruneq2022.02.02

CPE	Name	Operator	Version
	filerun	eq	2022.02.02

References

filerun.com/changelog

herolab.usd.de/security-advisories/usd-2022-0009/