packetstormsecurity.com
http://packetstormsecurity.com/files/166074/FileCloud-21.2-Cross-Site-Request-Forgery.html CVE-2022-25241
HIGH
FileCloud 21.2 - Cross-Site Request Forgery (CSRF)
Record summary
CVE-2022-25241 has a selected CVSS score of 8.8 (high); EIP currently links 1 catalogued exploit.
Description
In FileCloud before 21.3, the CSV user import functionality is vulnerable to Cross-Site Request Forgery (CSRF).
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBFileCloud 21.2 - Cross-Site Request Forgery (CSRF)ExploitDB exploitby Masashi FujiwaraNot analyzed1 file
References
4herolab.usd.de
https://herolab.usd.de/security-advisories nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2022-25241 filecloud.com
https://www.filecloud.com/supportdocs/display/cloud/Advisory+2022-01-3+Threat+of+CSRF+via+User+Creation