CVE-2021-43397

LiquidFiles is affected when using versions before 3.6.3, where Privilege Escalation from Admin/User Admin to Sysadmin is possible via exposed API/user data (public disclosures reference 3.5.13 and related 3.x disclosures). CVSSv3 vector: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H; base score 8.8. Remed...