CVE-2021-26619

CVE-2021-26619 describes a path traversal vulnerability in BigFileAgent that allows a remote attacker to delete arbitrary files. Affected component: BigFileAgent; the root cause is a path traversal flaw enabling access to files outside the intended scope. Public records provided in the initial do...

CVE-2022-23766

Mode C: CVE-2022-23766 affects BigFileAgent and is described as an improper input validation vulnerability that enables arbitrary file execution when a user visits a malicious page or an attacker injects XSS into a page. The connected records corroborate the general description and note BigFileAg...