Vulnerabilities

TI-2025-32395 CVE-2025-51663 · GHSA-hqm6-p3v5-x59r

A vulnerability found in IPRateLimit implementation of FileCodeBox up to 2.2 allows…

HIGH 66

A vulnerability found in IPRateLimit implementation of FileCodeBox up to 2.2 allows remote attackers to bypass ip-based rate limit protection and failed attempt restrictions by faking X-Real-IP and X-Forwarded-For HTTP h…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00441 Published 2025-11-19 No fix listed CWE-305

TI-2025-32394 CVE-2025-51662 · GHSA-9fxq-7j6c-gx45

A stored cross-site scripting (XSS) vulnerability is found in the text sharing feature of…

MEDIUM 58

A stored cross-site scripting (XSS) vulnerability is found in the text sharing feature of FileCodeBox version 2.2 and earlier.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00183 Published 2025-11-19 No fix listed CWE-79

TI-2025-32393 CVE-2025-51661 · GHSA-xpx4-57h5-9v98

A path Traversal vulnerability found in FileCodeBox v2.2 and earlier allows arbitrary…

HIGH 66

A path Traversal vulnerability found in FileCodeBox v2.2 and earlier allows arbitrary file writes when application is configured to use local filesystem storage.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0057 Published 2025-11-19 No fix listed CWE-24

TI-2024-22833 CVE-2024-34525 · GHSA-hrr2-23m9-vwg9

FileCodeBox 2.0 stores a OneDrive password and AWS key in a cleartext env file.

MEDIUM 57

FileCodeBox 2.0 stores a OneDrive password and AWS key in a cleartext env file.

CVSS 3.1MEDIUM 5.3 Local Low privileges No interaction EPSS 0.00152 Published 2024-05-05 No fix listed CWE-591

Vulnerabilities

Filters

A vulnerability found in IPRateLimit implementation of FileCodeBox up to 2.2 allows…

A stored cross-site scripting (XSS) vulnerability is found in the text sharing feature of…

A path Traversal vulnerability found in FileCodeBox v2.2 and earlier allows arbitrary…

FileCodeBox 2.0 stores a OneDrive password and AWS key in a cleartext env file.