CVE-2025-45091

CVE-2025-45091 affects Seafile server components in versions 11.0.18-Pro, 12.0.10, and 12.0.10-Pro. The flaw enables stored XSS via an authenticated user altering their username to inject a malicious XSS payload into notifications and activities, leading to script execution when viewed by other u...

Linux Distros Unpatched Vulnerability : CVE-2021-30146

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Seafile 7.0.5 2019 allows Persistent XSS via the share of library functionality. CVE-2021-30146 Note that Nessus relies on the presence of the package as report...

Linux Distros Unpatched Vulnerability : CVE-2013-7469

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Seafile through 6.2.11 always uses the same Initialization Vector IV with Cipher Block Chaining CBC Mode to encrypt private data, making it easier to conduct...

CVE-2023-28873

An XSS issue in wiki and discussion pages in Seafile 9.0.6 allows attackers to inject JavaScript into the Markdown editor...

CVE-2023-28874

The next parameter in the /accounts/login endpoint of Seafile 9.0.6 allows attackers to redirect users to arbitrary sites...

CVE-2023-28874

The next parameter in the /accounts/login endpoint of Seafile 9.0.6 allows attackers to redirect users to arbitrary sites...

CVE-2023-28873

An XSS issue in wiki and discussion pages in Seafile 9.0.6 allows attackers to inject JavaScript into the Markdown editor...

Code injection

The next parameter in the /accounts/login endpoint of Seafile 9.0.6 allows attackers to redirect users to arbitrary sites...

Cross site scripting

An XSS issue in wiki and discussion pages in Seafile 9.0.6 allows attackers to inject JavaScript into the Markdown editor...

CVE-2023-28874

Summary: CVE-2023-28874 affects Seafile 9.0.6, where the next parameter in the /accounts/login endpoint can redirect users to arbitrary sites (an open-redirect issue). The vulnerability is exploitable over the network and requires user interaction; no explicit exploit code or active exploit statu...

CVE-2023-28873

An XSS issue in wiki and discussion pages in Seafile 9.0.6 allows attackers to inject JavaScript into the Markdown editor...

CVE-2023-28874

The next parameter in the /accounts/login endpoint of Seafile 9.0.6 allows attackers to redirect users to arbitrary sites...

CVE-2023-28874

The next parameter in the /accounts/login endpoint of Seafile 9.0.6 allows attackers to redirect users to arbitrary sites...

CVE-2023-28873

An XSS issue in wiki and discussion pages in Seafile 9.0.6 allows attackers to inject JavaScript into the Markdown editor...

Seafile Security Breach

HaiwenHuzhi Network Technology Seafile is an open source enterprise cloud disk from China HaiwenHuzhi Network Technology. The product features Markdown WYSIWYG editing, Wiki, file labeling and more. A security vulnerability exists in Seafile version 9.0.6, which originated from allowing an attack...

CVE-2023-28873

The CVE-2023-28873 entry concerns Seafile 9.0.6 with an XSS flaw in wiki and discussion pages that permits injecting JavaScript into the Markdown editor. The connected PT-Security advisory confirms the affected software and describes the vulnerability as an XSS vector in the Markdown editor, with...

Seafile Security Breach

HaiwenHuzhi Network Technology Seafile is an open source enterprise cloud disk from China HaiwenHuzhi Network Technology. The product has Markdown WYSIWYG editing, Wiki, file labeling and other features. A security vulnerability exists in Seafile version 9.0.6, which stems from the presence of...

PT-2023-22023 · Seafile · Seafile

Name of the Vulnerable Software and Affected Versions: Seafile version 9.0.6 Description: An issue allows attackers to inject JavaScript into the Markdown editor in wiki and discussion pages. This is achieved through an XSS issue, which enables the execution of malicious scripts. Recommendations:...

SUSE CVE-2021-30146

Seafile 7.0.5 2019 allows Persistent XSS via the "share of library functionality."...

SUSE CVE-2021-43820

Seafile is an open source cloud storage system. A sync token is used in Seafile file syncing protocol to authorize access to library data. To improve performance, the token is cached in memory in seaf-server. Upon receiving a token from sync client or SeaDrive client, the server checks whether th...