Lucene search
+L

18 matches found

RedhatCVE
RedhatCVE
•added 2026/01/09 12:37 p.m.•19 views

CVE-2023-50639

Cross Site Scripting XSS vulnerability in CuteHttpFileServer v.1.0 and v.2.0 allows attackers to obtain sensitive information via the file upload function in the home page...

5.4CVSS5.7AI score0.0037EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 10:17 a.m.•14 views

CVE-2024-31552

CuteHttpFileServer v.3.1 version has an arbitrary file download vulnerability, which allows attackers to download arbitrary files on the server and obtain sensitive information...

7.1CVSS7AI score0.00238EPSS
SaveExploits0References1
NVD
NVD
•added 2024/04/19 5:15 p.m.•18 views

CVE-2024-31552

CuteHttpFileServer v.3.1 version has an arbitrary file download vulnerability, which allows attackers to download arbitrary files on the server and obtain sensitive information...

7.1CVSS6.6AI score0.00238EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/04/19 12:00 a.m.•42 views

CuteHttpFileServer 安全漏洞

CuteHttpFileServer chfs is a file sharing server from chfs open source. A security vulnerability exists in CuteHttpFileServer version v.3.1, which stems from the presence of an arbitrary file download vulnerability. An attacker can exploit this vulnerability to download arbitrary files on the...

7.1CVSS6.8AI score0.00238EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/04/19 12:00 a.m.•27 views

CVE-2024-31552

CuteHttpFileServer v.3.1 version has an arbitrary file download vulnerability, which allows attackers to download arbitrary files on the server and obtain sensitive information...

6.8AI score0.00238EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/04/19 12:00 a.m.•19 views

CVE-2024-31552

CuteHttpFileServer v.3.1 version has an arbitrary file download vulnerability, which allows attackers to download arbitrary files on the server and obtain sensitive information...

6.9AI score0.00238EPSS
SaveExploits0References1
CVE
CVE
•added 2024/04/19 12:00 a.m.•127 views

CVE-2024-31552

CuteHttpFileServer version v.3.1 is susceptible to an arbitrary file download vulnerability. This flaw stems from an improper limitation of a pathname to a restricted directory , which allows an attacker to download arbitrary files from the server. Successful exploitation can lead to the disclosu...

7.1CVSS6.8AI score0.00238EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/04/19 12:00 a.m.•17 views

PT-2024-24138 · Unknown · Cute Http File Server

Name of the Vulnerable Software and Affected Versions: CuteHttpFileServer version 3.1 Description: The issue allows attackers to download arbitrary files on the server, potentially obtaining sensitive information. Recommendations: For CuteHttpFileServer version 3.1, update to a version that fixes...

7.1CVSS7AI score0.00238EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/19 12:00 a.m.•3 views

CVE-2024-31552: Improper Limitation of a Pathname to a Restricted Directory

CuteHttpFileServer v.3.1 version has an arbitrary file download vulnerability, which allows attackers to download arbitrary files on the server and obtain sensitive information...

7.1CVSS5.9AI score0.00238EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2023/12/20 9:15 p.m.•8 views

CVE-2023-50639

Cross Site Scripting XSS vulnerability in CuteHttpFileServer v.1.0 and v.2.0 allows attackers to obtain sensitive information via the file upload function in the home page...

5.4CVSS6AI score0.0037EPSS
SaveExploits0References2
OSV
OSV
•added 2023/12/20 9:15 p.m.•18 views

CVE-2023-50639

Cross Site Scripting XSS vulnerability in CuteHttpFileServer v.1.0 and v.2.0 allows attackers to obtain sensitive information via the file upload function in the home page...

5.4CVSS5.8AI score0.0037EPSS
SaveExploits0References1
NVD
NVD
•added 2023/12/20 9:15 p.m.•23 views

CVE-2023-50639

Cross Site Scripting XSS vulnerability in CuteHttpFileServer v.1.0 and v.2.0 allows attackers to obtain sensitive information via the file upload function in the home page...

5.4CVSS0.0037EPSS
SaveExploits0References1
Prion
Prion
•added 2023/12/20 9:15 p.m.•25 views

Cross site scripting

Cross Site Scripting XSS vulnerability in CuteHttpFileServer v.1.0 and v.2.0 allows attackers to obtain sensitive information via the file upload function in the home page...

4.9CVSS5.8AI score0.0037EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2023/12/20 12:00 a.m.•13 views

CuteHttpFileServer Cross-Site Scripting Vulnerability

CuteHttpFileServer chfs is a file sharing server from chfs open source. A cross-site scripting vulnerability exists in CuteHttpFileServer versions v.1.0, v.2.0, which originates from allowing an attacker to obtain sensitive information via the file upload function in the homepage...

5.4CVSS6.1AI score0.0037EPSS
SaveExploits0References2
CVE
CVE
•added 2023/12/20 12:00 a.m.•61 views

CVE-2023-50639

CVE-2023-50639 : A cross-site scripting (XSS) vulnerability exists in CuteHttpFileServer (CHFS) versions 1.0 and 2.0, originating from the file upload feature on the homepage. Exploitation could allow an attacker to obtain sensitive information via the uploaded file handling. Public sources consi...

5.4CVSS5.2AI score0.0037EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/12/20 12:00 a.m.•37 views

CVE-2023-50639

Cross Site Scripting XSS vulnerability in CuteHttpFileServer v.1.0 and v.2.0 allows attackers to obtain sensitive information via the file upload function in the home page...

5.4AI score0.0037EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/20 12:00 a.m.•7 views

CVE-2023-50639: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in CuteHttpFileServer v.1.0 and v.2.0 allows attackers to obtain sensitive information via the file upload function in the home page...

5.4CVSS5.9AI score0.0037EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/12/11 12:00 a.m.•17 views

PT-2023-31604 · Unknown · Cute Http File Server

Name of the Vulnerable Software and Affected Versions: CuteHttpFileServer versions 1.0 through 2.0 Description: A Cross Site Scripting XSS issue allows attackers to obtain sensitive information via the file upload function on the home page. Recommendations: For CuteHttpFileServer versions 1.0 and...

5.4CVSS5.3AI score0.0037EPSS
SaveExploits0References5
Rows per page
Query Builder