Afian: >> Filerun >> 2021.03.26 Security Vulnerabilities
A Broken Access Control issue in comments to uploaded files in Filerun through Update 20220202 allows attackers to delete comments on files uploaded by other users.
CVSS Score
4.3
EPSS Score
0.005
Published
2023-12-06
Afian FileRun 2021.03.26 allows XSS when an administrator encounters a crafted document during use of the HTML Editor for a preview or edit action.
CVSS Score
6.1
EPSS Score
0.007
Published
2021-10-05
Afian FileRun 2021.03.26 allows stored XSS via an HTTP X-Forwarded-For header that is mishandled when rendering Activity Logs.
CVSS Score
6.1
EPSS Score
0.007
Published
2021-10-05
Afian FileRun 2021.03.26 allows Remote Code Execution (by administrators) via the Check Path value for the ffmpeg binary.
CVSS Score
7.2
EPSS Score
0.031
Published
2021-10-05
Afian FileRun 2021.03.26 allows Remote Code Execution (by administrators) via the Check Path value for the magick binary.
CVSS Score
7.2
EPSS Score
0.027
Published
2021-10-05