PatchTheCVEfilecloud vulnerabilities and fixes
Recent CVEs affecting filecloud, with upgrade or downgrade steps. 5 tracked.
filecloud has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2022-11-23. Highest priority: CVE-2022-25241 (score 58/100).
- CVE-2022-39833 HIGH 7.2 UPGRADE FileCloud Versions 20.2 and later allows remote attackers to potentially cause unauthorized remote code execut
- CVE-2022-25242 HIGH 8.8 UPGRADE In FileCloud before 21.3, file upload is not protected against Cross-Site Request Forgery (CSRF).
- CVE-2022-25241 HIGH 8.8 UPGRADE In FileCloud before 21.3, the CSV user import functionality is vulnerable to Cross-Site Request Forgery (CSRF)
- CVE-2022-24633 MEDIUM 5.3 UPGRADE All versions of FileCloud prior to 21.3 are vulnerable to user enumeration
- CVE-2022-1958 MEDIUM 6.3 UPGRADE A vulnerability classified as critical has been found in FileCloud
FAQ
How do I fix filecloud vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is filecloud being exploited right now?
None of the tracked filecloud CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which filecloud CVE should I patch first?
CVE-2022-25241 currently ranks highest (58/100): In FileCloud before 21.3, the CSV user import functionality is vulnerable to Cross-Site Request Forgery (CSRF).