CVE-2020-29071

LiquidFiles contains an XSS vulnerability in the Shares feature prior to version 3.3.19. The issue stems from insecure rendering of HTML attachments when accessed via the -htmlview URL, permitting an attacker to execute commands on the server as root or exfiltrate information about encrypted e-ma...