Read the docs

filegator

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

filegator records in CISA KEV

No filegator vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Filegator 3 records LOW

Records

3 records in Filegator · all components

TI-2026-45171 CVE-2026-63358 · GHSA-9m9p-7p6h-xv99

FileGator privilege escalation

Priority LOW 39

FileGator accepts arbitrary Unix permission values via the '/chmoditems' API endpoint and passes the value directly to PHP's native 'chmod()' function through 'octdec()' conversion, with no validation.

CVSS 4.0HIGH 8.4 Local Low privileges No interaction EPSS 0.00509 Published 2026-07-21 Fixed in 7.14.2 CWE-732
TI-2022-01714 CVE-2022-1850 · GHSA-rrhw-54r8-545q

Path Traversal in filegator/filegator

Priority LOW 37

Path Traversal in GitHub repository filegator/filegator prior to 7.8.0.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.01018 Published 2022-05-24 Fixed in 7.8.0 CWE-22
TI-2022-01713 CVE-2022-1849 · GHSA-47vg-483w-hp3m

Session Fixation in filegator/filegator

Priority LOW 26

Session Fixation in GitHub repository filegator/filegator prior to 7.8.0.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00818 Published 2022-05-24 Fixed in 7.8.0 CWE-384
Open these records in search →