PT-2019-13014

Name of the Vulnerable Software and Affected Versions FileRun versions prior to 2019.06.01 Description The issue allows for XSS via the filename to the "/?module=fileman&section=do&page=up" API endpoint. This has been fixed in a later version. Recommendations For versions prior to 2019.06.01,...

Afian AB FileRun path traversal vulnerability (CNVD-2019-16406)

Afian AB FileRun is an extensible file manager from Afian AB, Sweden, that features file sharing, cloud file storage, and more. A path traversal vulnerability exists in Afian AB FileRun version 2019.05.21. The vulnerability stems from a failure of a networked system or product to properly filter...

Afian AB FileRun Path Traversal Vulnerability

Afian AB FileRun is an extensible file manager from Afian AB, Sweden, that features file sharing, cloud file storage, and more. A path traversal vulnerability exists in Afian AB FileRun version 2019.05.21. The vulnerability stems from a failure of a networked system or product to properly filter...

CVE-2019-12458

FileRun 2019.05.21 allows css/ext-ux Directory Listing. This issue has been fixed in FileRun 2019.06.01...

CVE-2019-12459

FileRun 2019.05.21 allows customizables/plugins/audioplayer Directory Listing. This issue has been fixed in FileRun 2019.06.01...

CVE-2019-12458

FileRun 2019.05.21 allows css/ext-ux Directory Listing. This issue has been fixed in FileRun 2019.06.01...

CVE-2019-12459

FileRun 2019.05.21 allows customizables/plugins/audioplayer Directory Listing. This issue has been fixed in FileRun 2019.06.01...

CVE-2019-12457

FileRun 2019.05.21 allows images/extjs Directory Listing. This issue has been fixed in FileRun 2019.06.01...

CVE-2019-12457

FileRun 2019.05.21 allows images/extjs Directory Listing. This issue has been fixed in FileRun 2019.06.01...

Design/Logic Flaw

FileRun 2019.05.21 allows css/ext-ux Directory Listing. This issue has been fixed in FileRun 2019.06.01...

Design/Logic Flaw

FileRun 2019.05.21 allows images/extjs Directory Listing. This issue has been fixed in FileRun 2019.06.01...

Design/Logic Flaw

FileRun 2019.05.21 allows customizables/plugins/audioplayer Directory Listing. This issue has been fixed in FileRun 2019.06.01...

CVE-2019-12459

FileRun 2019.05.21 allows customizables/plugins/audioplayer Directory Listing. This issue has been fixed in FileRun 2019.06.01...

CVE-2019-12459

CVE-2019-12459 describes a directory listing vulnerability in FileRun 2019.05.21 related to customizables/plugins/audio_player. Multiple sources (NVD, Red Hat, CNVD) corroborate that the issue exists in FileRun and was fixed in 2019.06.01. The Red Hat entry and other records align on the same des...

CVE-2019-12458

CVE-2019-12458 affects FileRun; the 2019.05.21 release is vulnerable to a css/ext-ux Directory Listing issue. The vulnerability is resolved in FileRun 2019.06.01 . Documents do not provide exploitation specifics or root-cause details beyond the listing exposure. Impact is described as potential d...

CVE-2019-12458

FileRun 2019.05.21 allows css/ext-ux Directory Listing. This issue has been fixed in FileRun 2019.06.01...

CVE-2019-12457

FileRun 2019.05.21 allows images/extjs Directory Listing. This issue has been fixed in FileRun 2019.06.01...

CVE-2019-12457

CVE-2019-12457 affects FileRun (version 2019.05.21) and allows directory listing of images/extjs. Root cause is not fully detailed in the provided documents, but the issue has been fixed in FileRun 2019.06.01. The CVE entry is corroborated by multiple sources (NVD, Red Hat advisory) and CNVD/CVEL...

CVE-2019-12457: Improper Limitation of a Pathname to a Restricted Directory

FileRun 2019.05.21 allows images/extjs Directory Listing. This issue has been fixed in FileRun 2019.06.01...

CVE-2019-12458: Improper Limitation of a Pathname to a Restricted Directory

FileRun 2019.05.21 allows css/ext-ux Directory Listing. This issue has been fixed in FileRun 2019.06.01...