CVE-2022-25241

CVE-2022-25241 : FileCloud before 21.3 is vulnerable to a Cross-Site Request Forgery (CSRF) in the CSV user import feature. The issue enables an attacker to trick a logged-in user into performing unintended actions, with impact on confidentiality, integrity, and availability as indicated by CVSS ...

CVE-2022-25242

The provided records confirm CVE-2022-25242 affects FileCloud prior to version 21.3, where the file upload feature lacks CSRF protection. The vulnerability is described as enabling CSRF via file uploads, with a CVSS v3.1 base score of 8.8 (HIGH) and attacker interaction required (UI:R, PR:N). No ...

CVE-2022-25242

In FileCloud before 21.3, file upload is not protected against Cross-Site Request Forgery CSRF...

FileCloud Cross-Site Request Forgery Vulnerability

FileCloud is an ultra-secure content collaboration platform from US-based FileCloud, Inc. offering industry-leading compliance, data governance, data leakage protection, data retention and digital rights management capabilities. A security vulnerability exists in FileCloud prior to 21.3 that allo...

FileCloud Cross-Site Request Forgery Vulnerability

FileCloud is an ultra-secure content collaboration platform from US-based FileCloud, Inc. offering industry-leading compliance, data governance, data leakage protection, data retention and digital rights management capabilities. A security vulnerability exists in FileCloud prior to 21.3 that allo...

CVE-2022-25241: Cross-Site Request Forgery (CSRF)

In FileCloud before 21.3, the CSV user import functionality is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2022-25242: Cross-Site Request Forgery (CSRF)

In FileCloud before 21.3, file upload is not protected against Cross-Site Request Forgery CSRF...

PT-2022-17173

Name of the Vulnerable Software and Affected Versions FileCloud versions prior to 21.3 Description The issue concerns a lack of protection against Cross-Site Request Forgery CSRF in file upload functionality. This means an attacker could potentially trick a user into performing unintended actions...

PT-2022-17172

Name of the Vulnerable Software and Affected Versions FileCloud versions prior to 21.3 Description The CSV user import functionality in FileCloud is vulnerable to Cross-Site Request Forgery CSRF. This issue allows an attacker to perform unauthorized actions on the application. Recommendations For...

CodeLathe FileCloud Information Disclosure Vulnerability

codelathe filecloud is a set of file access, synchronization and sharing solutions from codelathe in the United States for use within the enterprise. An information disclosure vulnerability exists in versions prior to CodeLathe FileCloud 20.2.0.11915. An attacker can exploit the vulnerability to...

CVE-2020-26524

CodeLathe FileCloud before 20.2.0.11915 allows username enumeration...

CVE-2020-26524

CodeLathe FileCloud before 20.2.0.11915 allows username enumeration...

Design/Logic Flaw

CodeLathe FileCloud before 20.2.0.11915 allows username enumeration...

CVE-2020-26524

CodeLathe FileCloud prior to 20.2.0.11915 contains an information-disclosure vulnerability that allows username enumeration. Affected product: CodeLathe FileCloud. Impact: attacker can enumerate usernames, facilitating targeted access attempts. Root cause: insufficient input handling leading to u...

CVE-2020-26524

CodeLathe FileCloud before 20.2.0.11915 allows username enumeration...

CVE-2020-26524: Undefined Security Weakness

CodeLathe FileCloud before 20.2.0.11915 allows username enumeration...

PT-2020-16438

Name of the Vulnerable Software and Affected Versions CodeLathe FileCloud versions prior to 20.2.0.11915 Description The issue allows username enumeration. Recommendations For versions prior to 20.2.0.11915, update to version 20.2.0.11915 or later to resolve the issue...

U.S. Dept Of Defense: Unrestricted File Upload

Summary: The endpoint at https://███████/ui/core/index.html required authentication, but navigating to https://█████/ui/core/index.html?mode=publicexpl-tabl./SHARED/rpchllmd/CSAT allow for read/write access. Description: The endpoint at...

CVE-2016-6578

CodeLathe FileCloud, version 13.0.0.32841 and earlier, contains a global cross-site request forgery CSRF vulnerability. An attacker can perform actions with the same permissions as a victim user, provided the victim has an active session and is induced to trigger the malicious request...

CVE-2016-6578

CodeLathe FileCloud, version 13.0.0.32841 and earlier, contains a global cross-site request forgery CSRF vulnerability. An attacker can perform actions with the same permissions as a victim user, provided the victim has an active session and is induced to trigger the malicious request...