Lucene search
Veracode Vulnerability DatabaseVERACODE:34019HistoryFeb 07, 2022 - 5:38 a.m.
Cross-site Request Forgery (CSRF)
2022-02-0705:38:00
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.007 Low
EPSS
Percentile
79.5%
github.com/filebrowser/filebrowser is vulnerable to cross-site request forgery. The vulnerability exists due to a lack of validation when creating a user with admin privilege allowing an attacker get access to filesystem via a maliciously crafted HTML webpage.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/filebrowser/filebrowser | le | v2.17.2 | |
| github.com/filebrowser/filebrowser | le | v2.17.2 |
References
packetstormsecurity.com/files/165885/FileBrowser-2.17.2-Code-Execution-Cross-Site-Request-Forgery.html
febin0x4e4a.blogspot.com/2022/01/critical-csrf-in-filebrowser.html
febin0x4e4a.wordpress.com/2022/01/19/critical-csrf-in-filebrowser/
febinj.medium.com/critical-csrf-to-rce-in-filebrowser-865a3c34b8e7
github.com/filebrowser/filebrowser/commit/74b7cd8e81840537a8206317344f118093153e8d
systemweakness.com/critical-csrf-to-rce-in-filebrowser-865a3c34b8e7
Related
cve
cve
CVE-2021-46398
2022-02-04 16:15:07
cvelist
cvelist
CVE-2021-46398
2022-02-04 15:05:05
zdt
zdt
osv
osv
Cross-Site Request Forgery in Filebrowser
2022-02-05 00:00:31
Cross-site request forgery in github.com/filebrowser/filebrowser/v2
2022-02-05 00:00:31
CVE-2021-46398
2022-02-04 16:15:07
prion
prion
Cross site request forgery (csrf)
2022-02-04 16:15:00
github
github
Cross-Site Request Forgery in Filebrowser
2022-02-05 00:00:31
nvd
nvd
CVE-2021-46398
2022-02-04 16:15:07
packetstorm
packetstorm
FileBrowser 2.17.2 Code Execution / Cross Site Request Forgery
2022-02-08 00:00:00
githubexploit
githubexploit
Exploit for Cross-Site Request Forgery (CSRF) in Filebrowser
2023-01-03 09:49:22
Exploit for Cross-Site Request Forgery (CSRF) in Filebrowser
2022-03-22 17:35:38
exploitdb
exploitdb