Filebrowser Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Filebrowser Project records in CISA KEV

No Filebrowser Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Filebrowser 1 record LOW

Records

1 record in Filebrowser · all components

TI-2021-15639 CVE-2021-37794 · GHSA-g49q-2fp8-w2mg

A stored cross-site scripting (XSS) vulnerability exists in FileBrowser < v2.16.0 that…

LOW 26

A stored cross-site scripting (XSS) vulnerability exists in FileBrowser < v2.16.0 that allows an authenticated user authorized to upload a malicious .svg file which acts as a stored XSS payload.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00779 Published 2021-08-31 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0