Vulnerabilities

TI-2024-17460 CVE-2024-26566 · GHSA-g56h-9v2h-9x2c

An issue in Cute Http File Server v.3.1 allows a remote attacker to escalate privileges…

HIGH 71

An issue in Cute Http File Server v.3.1 allows a remote attacker to escalate privileges via the password verification component.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.005 Published 2024-03-07 No fix listed CWE-288

TI-2023-27637 CVE-2023-50639 · GHSA-h23g-xqgm-m2pv

Cross Site Scripting (XSS) vulnerability in CuteHttpFileServer v.1.0 and v.2.0 allows…

LOW 25

Cross Site Scripting (XSS) vulnerability in CuteHttpFileServer v.1.0 and v.2.0 allows attackers to obtain sensitive information via the file upload function in the home page.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0037 Published 2023-12-20 No fix listed CWE-79

TI-2023-03814 CVE-2023-4118 · GHSA-77xf-hvcc-5j6h

Cute Http File Server Search cross site scripting

MEDIUM 60

A vulnerability, which was classified as problematic, was found in Cute Http File Server 2.0.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00519 Published 2023-08-03 No fix listed CWE-79

Vulnerabilities

Filters

An issue in Cute Http File Server v.3.1 allows a remote attacker to escalate privileges…

Cross Site Scripting (XSS) vulnerability in CuteHttpFileServer v.1.0 and v.2.0 allows…

Cute Http File Server Search cross site scripting