32 matches found
Privilege Escalation
FileGator is vulnerable to Privilege Escalation. The vulnerability is due to insufficient validation of user-supplied file permission values, where arbitrary Unix permission modes are passed directly to chmod, allowing authenticated users with chmod permission to escalate privileges to root...
Incorrect Permission Assignment for Critical Resource
Overview filegator/filegator is a free, open-source, self-hosted web application for managing files and folders. Affected versions of this package are vulnerable to Incorrect Permission Assignment for Critical Resource via the /chmoditems API endpoint, which accepts arbitrary Unix permission valu...
CVE-2026-63358
FileGator accepts arbitrary Unix permission values via the '/chmoditems' API endpoint and passes the value directly to PHP's native 'chmod' function through 'octdec' conversion, with no validation. This allows an authenticated user with 'chmod' permission to upgrade their privileges to root...
CVE-2026-63358 FileGator privilege escalation
FileGator accepts arbitrary Unix permission values via the '/chmoditems' API endpoint and passes the value directly to PHP's native 'chmod' function through 'octdec' conversion, with no validation. This allows an authenticated user with 'chmod' permission to upgrade their privileges to root...
CVE-2026-63358 FileGator privilege escalation
FileGator accepts arbitrary Unix permission values via the '/chmoditems' API endpoint and passes the value directly to PHP's native 'chmod' function through 'octdec' conversion, with no validation. This allows an authenticated user with 'chmod' permission to upgrade their privileges to root...
CVE-2026-63358 FileGator privilege escalation
FileGator accepts arbitrary Unix permission values via the '/chmoditems' API endpoint and passes the value directly to PHP's native 'chmod' function through 'octdec' conversion, with no validation. This allows an authenticated user with 'chmod' permission to upgrade their privileges to root...
CVE-2026-63358
Summary of CVE-2026-63358 (FileGator privilege escalation) The affected software is FileGator. The vulnerability arises in the /chmoditems API endpoint, which accepts arbitrary Unix permission values and passes them directly to PHP’s native chmod() via octdec() without validation. This enables an...
FileGator privilege escalation
RISK EVALUATION FileGator accepts arbitrary Unix permission values via the '/chmoditems' API endpoint and passes the value directly to PHP's native 'chmod' function through 'octdec' conversion, with no validation. This allows an authenticated user with 'chmod' permission to upgrade their...
EUVD-2022-2331
Malicious code in bioql PyPI...
EUVD-2022-5227
Malicious code in bioql PyPI...
CVE-2022-1849
Session Fixation in GitHub repository filegator/filegator prior to 7.8.0...
CVE-2022-1850
Path Traversal in GitHub repository filegator/filegator prior to 7.8.0...
Path Traversal
filegator/filegator is vulnerable to path traversal. Insufficient sanitization in joinPaths function allows remote authenticated attackers write,move and copy files outside of intended scope...
Session Fixation
filegator/filegator is vulnerable to session fixation. The vulnerability exists in the authenticate function in JsonFile.php due to invalid session generation on user update which allows a malicious user to hijack the session...
GHSA-RRHW-54R8-545Q Path Traversal in FileGator
Path Traversal in FileGator prior to 7.8.0 for non-admin users. Files created with ..\ as part of their name will be interpreted as a path. Users are thus able to add filesystem entries outside the scope of their user to their dashboard and subsequently are able to modify those files...
Path Traversal in FileGator
Path Traversal in FileGator prior to 7.8.0 for non-admin users. Files created with ..\ as part of their name will be interpreted as a path. Users are thus able to add filesystem entries outside the scope of their user to their dashboard and subsequently are able to modify those files...
GHSA-47VG-483W-HP3M Improper user session handling in filegator
FileGator prior to version 7.8.0 is vulnerable to session fixation...
Improper user session handling in filegator
FileGator prior to version 7.8.0 is vulnerable to session fixation...
