CVE-2021-43820

Seafile is an open source cloud storage system. A sync token is used in Seafile file syncing protocol to authorize access to library data. To improve performance, the token is cached in memory in seaf-server. Upon receiving a token from sync client or SeaDrive client, the server checks whether th...

CVE-2021-43820

Seafile is an open source cloud storage system. A sync token is used in Seafile file syncing protocol to authorize access to library data. To improve performance, the token is cached in memory in seaf-server. Upon receiving a token from sync client or SeaDrive client, the server checks whether th...

CVE-2021-43820

Seafile is an open source cloud storage system. A sync token is used in Seafile file syncing protocol to authorize access to library data. To improve performance, the token is cached in memory in seaf-server. Upon receiving a token from sync client or SeaDrive client, the server checks whether th...

CVE-2021-43820

Seafile is an open source cloud storage system. A sync token is used in Seafile file syncing protocol to authorize access to library data. To improve performance, the token is cached in memory in seaf-server. Upon receiving a token from sync client or SeaDrive client, the server checks whether th...

Design/Logic Flaw

Seafile is an open source cloud storage system. A sync token is used in Seafile file syncing protocol to authorize access to library data. To improve performance, the token is cached in memory in seaf-server. Upon receiving a token from sync client or SeaDrive client, the server checks whether th...

CVE-2021-43820 Permissions check bypass in Seafile

Seafile is an open source cloud storage system. A sync token is used in Seafile file syncing protocol to authorize access to library data. To improve performance, the token is cached in memory in seaf-server. Upon receiving a token from sync client or SeaDrive client, the server checks whether th...

CVE-2021-43820

The CVE-2021-43820 entries describe a permissions-check bypass in Seafile: the in-memory sync token cache does not verify library association in the request URL, allowing a token to access data from any known library if the attacker discovers a library ID. Affected product: Seafile (Seaf-server t...

Seafile 安全漏洞

Seafile is an open source enterprise cloud disk from Haven Hootsuite Network Technologies. The product features Markdown WYSIWYG editing, Wiki, file labeling, and more. Seafile has a security vulnerability that stems from the use of synchronization tokens in the Seafile file synchronization...

Seafile Cross-Site Scripting Vulnerability

Seafile is an open source, cross-platform file hosting software system. A cross-site scripting vulnerability exists in Seafile 7.0.5. The vulnerability can be exploited to inject and execute malicious JavaScript code via the "shared library feature"...

CVE-2021-30146

Seafile 7.0.5 2019 allows Persistent XSS via the "share of library functionality."...

CVE-2021-30146

Seafile 7.0.5 2019 allows Persistent XSS via the "share of library functionality."...

UBUNTU-CVE-2021-30146

Seafile 7.0.5 2019 allows Persistent XSS via the "share of library functionality."...

CVE-2021-30146

Seafile 7.0.5 2019 allows Persistent XSS via the "share of library functionality."...

Cross site scripting

Seafile 7.0.5 2019 allows Persistent XSS via the "share of library functionality."...

CVE-2021-30146

Seafile 7.0.5 2019 allows Persistent XSS via the "share of library functionality."...

CVE-2021-30146

Removed by vendor...

CVE-2021-30146

Seafile 7.0.5 2019 allows Persistent XSS via the "share of library functionality."...

CVE-2021-30146

CVE-2021-30146 affects Seafile Server 7.0.5 (2019). The vulnerability is a Persistent XSS in the"share of library" feature, enabling malicious JavaScript execution. The attack path described in sources indicates an attacker with a local account can create a shared library containing injected scri...

Exploit for Cross-site Scripting in Seafile

CVE-2021-30146 Seafile 7.0.5 Persistent XSS Suggested descri...

Seafile 跨站脚本漏洞

Seafile is an open source, cross-platform file hosting software system. A cross-site scripting vulnerability exists in Seafile 7.0.5. The vulnerability can be exploited to inject and execute malicious JavaScript code via the "shared library feature"...