Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: filegator Component: Filegator Clear all filters
TI-2026-45171 CVE-2026-63358 · GHSA-9m9p-7p6h-xv99

FileGator privilege escalation

Priority LOW 39

FileGator accepts arbitrary Unix permission values via the '/chmoditems' API endpoint and passes the value directly to PHP's native 'chmod()' function through 'octdec()' conversion, with no validation.

CVSS 4.0HIGH 8.4 Local Low privileges No interaction EPSS 0.00509 Published 2026-07-21 Fixed in 7.14.2 CWE-732
TI-2022-01714 CVE-2022-1850 · GHSA-rrhw-54r8-545q

Path Traversal in filegator/filegator

Priority LOW 37

Path Traversal in GitHub repository filegator/filegator prior to 7.8.0.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.01018 Published 2022-05-24 Fixed in 7.8.0 CWE-22
TI-2022-01713 CVE-2022-1849 · GHSA-47vg-483w-hp3m

Session Fixation in filegator/filegator

Priority LOW 26

Session Fixation in GitHub repository filegator/filegator prior to 7.8.0.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00818 Published 2022-05-24 Fixed in 7.8.0 CWE-384