CVE-2023-28875

A Stored XSS issue in shared files download terms in Filerun Update 20220202 allows attackers to inject JavaScript code that is executed when a user follows the crafted share link...

CVE-2023-28876

The CVE-2023-28876 issue affects Filerun up to Update 20220202, describing a Broken Access Control in comments on uploaded files that allows an attacker to delete comments on files uploaded by other users. The available connected records confirm the affected product (Filerun) and the impact on co...

PT-2023-22026 · Filerun · Filerun

Name of the Vulnerable Software and Affected Versions: Filerun versions through Update 20220202 Description: A Broken Access Control issue in comments to uploaded files allows attackers to delete comments on files uploaded by other users. Recommendations: For versions through Update 20220202,...