32 matches found
Session fixation
Session Fixation in GitHub repository filegator/filegator prior to 7.8.0...
CVE-2022-1850
Path Traversal in GitHub repository filegator/filegator prior to 7.8.0...
CVE-2022-1850
Path Traversal in GitHub repository filegator/filegator prior to 7.8.0...
Path traversal
Path Traversal in GitHub repository filegator/filegator prior to 7.8.0...
CVE-2022-1850 Path Traversal in filegator/filegator
Path Traversal in GitHub repository filegator/filegator prior to 7.8.0...
CVE-2022-1850 Path Traversal in filegator/filegator
Path Traversal in GitHub repository filegator/filegator prior to 7.8.0...
CVE-2022-1850
CVE-2022-1850 affects filegator/filegator prior to 7.8.0. A path traversal vulnerability exists due to insufficient sanitization in the joinPaths logic, allowing non-admin users to create or reference files outside the intended scope (e.g., using ..\ in names) and potentially modify or manage fil...
CVE-2022-1849 Session Fixation in filegator/filegator
Session Fixation in GitHub repository filegator/filegator prior to 7.8.0...
CVE-2022-1849 Session Fixation in filegator/filegator
Session Fixation in GitHub repository filegator/filegator prior to 7.8.0...
filegator 路径遍历漏洞
filegator is a free, open source, self-hosted web application. It is used to manage files and folders. A security vulnerability exists in filegator versions prior to 7.8.0, which stems from a path traversal vulnerability...
filegator 授权问题漏洞
filegator is a free, open source, self-hosted web application. It is used to manage files and folders. A security vulnerability exists in filegator versions prior to 7.8.0, which stems from the updateUser function not resetting a user's session...
Session Fixation in filegator/filegator
✍️ Description the password reset function is vulnerable to session fixation bug, it's a small low hanging bug 🕵️♂️ Proof of Concept open filegator and login with similar accounts in multiple browsers. change the password of the user in one browser and reload the other login session. we can see...