Priority LOW 27
Jirafeau normally prevents browser preview for text files due to the possibility that for example SVG and HTML documents could be exploited for cross site scripting.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.0032 · Published 2026-01-28 · Fixed in 4.7.1 CWE-79
Priority LOW 27
Jirafeau normally prevents browser preview for text files due to the possibility that for example SVG and HTML documents could be exploited for cross site scripting.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00309 · Published 2025-07-04 · Fixed in 4.6.3 CWE-79
Priority LOW 27
Jirafeau normally prevents browser preview for SVG files due to the possibility that manipulated SVG files could be exploited for cross site scripting.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00242 · Published 2024-12-06 · Fixed in 4.6.1 CWE-79
Priority LOW 28
The file preview functionality in Jirafeau < 4.4.0, which is enabled by default, could be exploited for cross site scripting.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00609 · Published 2022-05-17 · Fixed in 4.4.0 CWE-79
Priority LOW 30
script.php in Jirafeau before 3.4.1 is affected by two stored Cross-Site Scripting (XSS) vulnerabilities.
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01218 · Published 2018-07-07 · No fix listed CWE-79
Priority LOW 28
An issue was discovered in Jirafeau before 3.4.1.
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00718 · Published 2018-07-07 · No fix listed CWE-79
Priority LOW 39
The administration panel of Jirafeau before 3.4.1 is vulnerable to three CSRF attacks on search functionalities: search_by_name, search_by_hash, and search_link.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.00527 · Published 2018-07-07 · No fix listed CWE-352
Priority LOW 28
An issue was discovered in Jirafeau before 3.4.1.
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00713 · Published 2018-07-06 · No fix listed CWE-79
Priority LOW 28
An issue was discovered in Jirafeau before 3.4.1.
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00707 · Published 2018-07-06 · No fix listed CWE-79
Priority LOW 23
A CSRF issue was discovered in Jirafeau before 3.4.1.
CVSS 3.0MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.00384 · Published 2018-07-06 · No fix listed CWE-352
THREATIST.IORead the docs