TI-2025-27430 CVE-2025-41080 · GHSA-qwww-q2vq-c559
Multiple vulnerabilities in Seafile
Priority LOW 23
A stored Cross-Site Scripting (XSS) vulnerability has been found in Seafile v12.0.10.
Vulnerabilities
6 records
TI-2025-27429 CVE-2025-41079 · GHSA-pf6g-7xf6-4cr6
Multiple vulnerabilities in Seafile
Priority LOW 23
A stored Cross-Site Scripting (XSS) vulnerability has been found in Seafile v12.0.10.
TI-2023-13378 CVE-2023-28874 · GHSA-26qc-7vc3-c96r
The next parameter in the /accounts/login endpoint of Seafile 9.0.6 allows attackers to…
Priority LOW 28
The next parameter in the /accounts/login endpoint of Seafile 9.0.6 allows attackers to redirect users to arbitrary sites.
TI-2023-13377 CVE-2023-28873 · GHSA-vvj2-xxxq-p34c
An XSS issue in wiki and discussion pages in Seafile 9.0.6 allows attackers to inject…
Priority LOW 25
An XSS issue in wiki and discussion pages in Seafile 9.0.6 allows attackers to inject JavaScript into the Markdown editor.
TI-2021-10688 CVE-2021-30146 · GHSA-pj73-7h6v-vg38
Seafile 7.0.5 (2019) allows Persistent XSS via the "share of library functionality."
Priority LOW 26
Seafile 7.0.5 (2019) allows Persistent XSS via the "share of library functionality."
TI-2013-06121 CVE-2013-7469 · GHSA-fx39-m2fm-46w5
Seafile through 6.2.11 always uses the same Initialization Vector (IV) with Cipher Block…
Priority LOW 35
Seafile through 6.2.11 always uses the same Initialization Vector (IV) with Cipher Block Chaining (CBC) Mode to encrypt private data, making it easier to conduct chosen-plaintext attacks or dictionary attacks.