Vendors / Seafile Records 12 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 6
Exploited now Seafile records in CISA KEV No Seafile vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 35
Seafile through 6.2.11 always uses the same Initialization Vector (IV) with Cipher Block Chaining (CBC) Mode to encrypt private data, making it easier to conduct chosen-plaintext attacks or dictionary attacks.
CVSS 3.0 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01089 · Published 2019-02-21 · No fix listed CWE-326
Priority LOW 28
The next parameter in the /accounts/login endpoint of Seafile 9.0.6 allows attackers to redirect users to arbitrary sites.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00451 · Published 2023-12-09 · No fix listed CWE-601
Priority LOW 26
Seafile 7.0.5 (2019) allows Persistent XSS via the "share of library functionality."
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.0086 · Published 2021-04-06 · No fix listed CWE-79
Priority LOW 25
An XSS issue in wiki and discussion pages in Seafile 9.0.6 allows attackers to inject JavaScript into the Markdown editor.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00445 · Published 2023-12-09 · No fix listed CWE-79
Priority LOW 23
A stored Cross-Site Scripting (XSS) vulnerability has been found in Seafile v12.0.10.
CVSS 4.0 MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.0021 · Published 2025-12-04 · No fix listed CWE-79
Priority LOW 23
A stored Cross-Site Scripting (XSS) vulnerability has been found in Seafile v12.0.10.
CVSS 4.0 MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.0021 · Published 2025-12-04 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
0 6 6 0 0
THREATIST.IORead the docs