Search
Find a vulnerability
Search criteria
6 vulnerabilities by FileGator
CVE-2026-63358 (GCVE-0-2026-63358)
Vulnerability from nvd – Published: 2026-07-21 20:13 – Updated: 2026-07-21 20:13
VLAI
EPSS
VEX
Title
FileGator privilege escalation
Summary
FileGator accepts arbitrary Unix permission values via the '/chmoditems' API endpoint and passes the value directly to PHP's native 'chmod()' function through 'octdec()' conversion, with no validation. This allows an authenticated user with 'chmod' permission to upgrade their privileges to root.
Severity
CWE
- CWE-732 - Incorrect Permission Assignment for Critical Resource
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://github.com/filegator/filegator/blob/maste… | release-notes |
| https://github.com/filegator/filegator/commit/4a4… | patch |
| https://github.com/filegator/filegator/tree/master | product |
| https://www.cve.org/CVERecord?id=CVE-2026-63358 | vdb-entry |
| https://raw.githubusercontent.com/cisagov/CSAF/de… | third-party-advisory |
Impacted products
Date Public
2026-05-18 00:00
Credits
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "FileGator",
"vendor": "FileGator",
"versions": [
{
"lessThan": "7.14.2",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "7.14.2"
}
]
}
],
"credits": [
{
"lang": "en",
"value": "Abdul Moiz"
}
],
"datePublic": "2026-05-18T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "FileGator accepts arbitrary Unix permission values via the \u0027/chmoditems\u0027 API endpoint and passes the value directly to PHP\u0027s native \u0027chmod()\u0027 function through \u0027octdec()\u0027 conversion, with no validation. This allows an authenticated user with \u0027chmod\u0027 permission to upgrade their privileges to root."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
}
},
{
"cvssV4_0": {
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "LOCAL",
"baseScore": 8.4,
"baseSeverity": "HIGH",
"privilegesRequired": "LOW",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "LOW",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH"
}
},
{
"other": {
"content": {
"id": "CVE-2026-63358",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-07-14T19:33:24.593024Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-732",
"description": "CWE-732 Incorrect Permission Assignment for Critical Resource",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-21T20:13:07.624Z",
"orgId": "9119a7d8-5eab-497f-8521-727c672e3725",
"shortName": "cisa-cg"
},
"references": [
{
"name": "url",
"tags": [
"release-notes"
],
"url": "https://github.com/filegator/filegator/blob/master/CHANGELOG.md#7142---2026-05-18"
},
{
"name": "url",
"tags": [
"patch"
],
"url": "https://github.com/filegator/filegator/commit/4a44ed9a43f84505703dce669c68fb55270c3f2c"
},
{
"name": "url",
"tags": [
"product"
],
"url": "https://github.com/filegator/filegator/tree/master"
},
{
"name": "url",
"tags": [
"vdb-entry"
],
"url": "https://www.cve.org/CVERecord?id=CVE-2026-63358"
},
{
"name": "url",
"tags": [
"third-party-advisory"
],
"url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2026/va-26-202-03.json"
}
],
"title": "FileGator privilege escalation"
}
},
"cveMetadata": {
"assignerOrgId": "9119a7d8-5eab-497f-8521-727c672e3725",
"assignerShortName": "cisa-cg",
"cveId": "CVE-2026-63358",
"datePublished": "2026-07-21T20:13:07.624Z",
"dateReserved": "2026-07-16T14:46:57.734Z",
"dateUpdated": "2026-07-21T20:13:07.624Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2022-1849 (GCVE-0-2022-1849)
Vulnerability from nvd – Published: 2022-05-24 12:05 – Updated: 2024-08-03 00:17
VLAI
EPSS
VEX
Title
Session Fixation in filegator/filegator
Summary
Session Fixation in GitHub repository filegator/filegator prior to 7.8.0.
Severity
4.3 (Medium)
CWE
- CWE-384 - Session Fixation
Assigner
References
2 references
| URL | Tags |
|---|---|
| https://huntr.dev/bounties/881f8f36-d5c8-470d-826… | x_refsource_CONFIRM |
| https://github.com/filegator/filegator/commit/fcd… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| filegator | filegator/filegator |
Affected:
unspecified , < 7.8.0
(custom)
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T00:17:00.823Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://huntr.dev/bounties/881f8f36-d5c8-470d-8261-f109e6d5db4b"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/filegator/filegator/commit/fcd3995f64f5dfc6a4c2c059cc22a2fef1e81225"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "filegator/filegator",
"vendor": "filegator",
"versions": [
{
"lessThan": "7.8.0",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Session Fixation in GitHub repository filegator/filegator prior to 7.8.0."
}
],
"metrics": [
{
"cvssV3_0": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
"version": "3.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-384",
"description": "CWE-384 Session Fixation",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2022-05-24T12:05:10.000Z",
"orgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
"shortName": "@huntrdev"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://huntr.dev/bounties/881f8f36-d5c8-470d-8261-f109e6d5db4b"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/filegator/filegator/commit/fcd3995f64f5dfc6a4c2c059cc22a2fef1e81225"
}
],
"source": {
"advisory": "881f8f36-d5c8-470d-8261-f109e6d5db4b",
"discovery": "EXTERNAL"
},
"title": "Session Fixation in filegator/filegator",
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "security@huntr.dev",
"ID": "CVE-2022-1849",
"STATE": "PUBLIC",
"TITLE": "Session Fixation in filegator/filegator"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "filegator/filegator",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_value": "7.8.0"
}
]
}
}
]
},
"vendor_name": "filegator"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Session Fixation in GitHub repository filegator/filegator prior to 7.8.0."
}
]
},
"impact": {
"cvss": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
"version": "3.0"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-384 Session Fixation"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://huntr.dev/bounties/881f8f36-d5c8-470d-8261-f109e6d5db4b",
"refsource": "CONFIRM",
"url": "https://huntr.dev/bounties/881f8f36-d5c8-470d-8261-f109e6d5db4b"
},
{
"name": "https://github.com/filegator/filegator/commit/fcd3995f64f5dfc6a4c2c059cc22a2fef1e81225",
"refsource": "MISC",
"url": "https://github.com/filegator/filegator/commit/fcd3995f64f5dfc6a4c2c059cc22a2fef1e81225"
}
]
},
"source": {
"advisory": "881f8f36-d5c8-470d-8261-f109e6d5db4b",
"discovery": "EXTERNAL"
}
}
}
},
"cveMetadata": {
"assignerOrgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
"assignerShortName": "@huntrdev",
"cveId": "CVE-2022-1849",
"datePublished": "2022-05-24T12:05:10.000Z",
"dateReserved": "2022-05-24T00:00:00.000Z",
"dateUpdated": "2024-08-03T00:17:00.823Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2022-1850 (GCVE-0-2022-1850)
Vulnerability from nvd – Published: 2022-05-24 12:10 – Updated: 2024-08-03 00:17
VLAI
EPSS
VEX
Title
Path Traversal in filegator/filegator
Summary
Path Traversal in GitHub repository filegator/filegator prior to 7.8.0.
Severity
5.4 (Medium)
CWE
- CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Assigner
References
2 references
| URL | Tags |
|---|---|
| https://huntr.dev/bounties/07755f07-a412-4911-84a… | x_refsource_CONFIRM |
| https://github.com/filegator/filegator/commit/6e2… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| filegator | filegator/filegator |
Affected:
unspecified , < 7.8.0
(custom)
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T00:17:00.986Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://huntr.dev/bounties/07755f07-a412-4911-84a4-2f8c03c8f7ce"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/filegator/filegator/commit/6e2b68f17f48cdc1d6a4a93a2369d2069fe64989"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "filegator/filegator",
"vendor": "filegator",
"versions": [
{
"lessThan": "7.8.0",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Path Traversal in GitHub repository filegator/filegator prior to 7.8.0."
}
],
"metrics": [
{
"cvssV3_0": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-22",
"description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2022-05-24T12:10:10.000Z",
"orgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
"shortName": "@huntrdev"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://huntr.dev/bounties/07755f07-a412-4911-84a4-2f8c03c8f7ce"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/filegator/filegator/commit/6e2b68f17f48cdc1d6a4a93a2369d2069fe64989"
}
],
"source": {
"advisory": "07755f07-a412-4911-84a4-2f8c03c8f7ce",
"discovery": "EXTERNAL"
},
"title": "Path Traversal in filegator/filegator",
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "security@huntr.dev",
"ID": "CVE-2022-1850",
"STATE": "PUBLIC",
"TITLE": "Path Traversal in filegator/filegator"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "filegator/filegator",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_value": "7.8.0"
}
]
}
}
]
},
"vendor_name": "filegator"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Path Traversal in GitHub repository filegator/filegator prior to 7.8.0."
}
]
},
"impact": {
"cvss": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://huntr.dev/bounties/07755f07-a412-4911-84a4-2f8c03c8f7ce",
"refsource": "CONFIRM",
"url": "https://huntr.dev/bounties/07755f07-a412-4911-84a4-2f8c03c8f7ce"
},
{
"name": "https://github.com/filegator/filegator/commit/6e2b68f17f48cdc1d6a4a93a2369d2069fe64989",
"refsource": "MISC",
"url": "https://github.com/filegator/filegator/commit/6e2b68f17f48cdc1d6a4a93a2369d2069fe64989"
}
]
},
"source": {
"advisory": "07755f07-a412-4911-84a4-2f8c03c8f7ce",
"discovery": "EXTERNAL"
}
}
}
},
"cveMetadata": {
"assignerOrgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
"assignerShortName": "@huntrdev",
"cveId": "CVE-2022-1850",
"datePublished": "2022-05-24T12:10:10.000Z",
"dateReserved": "2022-05-24T00:00:00.000Z",
"dateUpdated": "2024-08-03T00:17:00.986Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2026-63358 (GCVE-0-2026-63358)
Vulnerability from cvelistv5 – Published: 2026-07-21 20:13 – Updated: 2026-07-21 20:13
VLAI
EPSS
VEX
Title
FileGator privilege escalation
Summary
FileGator accepts arbitrary Unix permission values via the '/chmoditems' API endpoint and passes the value directly to PHP's native 'chmod()' function through 'octdec()' conversion, with no validation. This allows an authenticated user with 'chmod' permission to upgrade their privileges to root.
Severity
CWE
- CWE-732 - Incorrect Permission Assignment for Critical Resource
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://github.com/filegator/filegator/blob/maste… | release-notes |
| https://github.com/filegator/filegator/commit/4a4… | patch |
| https://github.com/filegator/filegator/tree/master | product |
| https://www.cve.org/CVERecord?id=CVE-2026-63358 | vdb-entry |
| https://raw.githubusercontent.com/cisagov/CSAF/de… | third-party-advisory |
Impacted products
Date Public
2026-05-18 00:00
Credits
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "FileGator",
"vendor": "FileGator",
"versions": [
{
"lessThan": "7.14.2",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "7.14.2"
}
]
}
],
"credits": [
{
"lang": "en",
"value": "Abdul Moiz"
}
],
"datePublic": "2026-05-18T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "FileGator accepts arbitrary Unix permission values via the \u0027/chmoditems\u0027 API endpoint and passes the value directly to PHP\u0027s native \u0027chmod()\u0027 function through \u0027octdec()\u0027 conversion, with no validation. This allows an authenticated user with \u0027chmod\u0027 permission to upgrade their privileges to root."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
}
},
{
"cvssV4_0": {
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "LOCAL",
"baseScore": 8.4,
"baseSeverity": "HIGH",
"privilegesRequired": "LOW",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "LOW",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH"
}
},
{
"other": {
"content": {
"id": "CVE-2026-63358",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-07-14T19:33:24.593024Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-732",
"description": "CWE-732 Incorrect Permission Assignment for Critical Resource",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-21T20:13:07.624Z",
"orgId": "9119a7d8-5eab-497f-8521-727c672e3725",
"shortName": "cisa-cg"
},
"references": [
{
"name": "url",
"tags": [
"release-notes"
],
"url": "https://github.com/filegator/filegator/blob/master/CHANGELOG.md#7142---2026-05-18"
},
{
"name": "url",
"tags": [
"patch"
],
"url": "https://github.com/filegator/filegator/commit/4a44ed9a43f84505703dce669c68fb55270c3f2c"
},
{
"name": "url",
"tags": [
"product"
],
"url": "https://github.com/filegator/filegator/tree/master"
},
{
"name": "url",
"tags": [
"vdb-entry"
],
"url": "https://www.cve.org/CVERecord?id=CVE-2026-63358"
},
{
"name": "url",
"tags": [
"third-party-advisory"
],
"url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2026/va-26-202-03.json"
}
],
"title": "FileGator privilege escalation"
}
},
"cveMetadata": {
"assignerOrgId": "9119a7d8-5eab-497f-8521-727c672e3725",
"assignerShortName": "cisa-cg",
"cveId": "CVE-2026-63358",
"datePublished": "2026-07-21T20:13:07.624Z",
"dateReserved": "2026-07-16T14:46:57.734Z",
"dateUpdated": "2026-07-21T20:13:07.624Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2022-1850 (GCVE-0-2022-1850)
Vulnerability from cvelistv5 – Published: 2022-05-24 12:10 – Updated: 2024-08-03 00:17
VLAI
EPSS
VEX
Title
Path Traversal in filegator/filegator
Summary
Path Traversal in GitHub repository filegator/filegator prior to 7.8.0.
Severity
5.4 (Medium)
CWE
- CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Assigner
References
2 references
| URL | Tags |
|---|---|
| https://huntr.dev/bounties/07755f07-a412-4911-84a… | x_refsource_CONFIRM |
| https://github.com/filegator/filegator/commit/6e2… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| filegator | filegator/filegator |
Affected:
unspecified , < 7.8.0
(custom)
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T00:17:00.986Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://huntr.dev/bounties/07755f07-a412-4911-84a4-2f8c03c8f7ce"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/filegator/filegator/commit/6e2b68f17f48cdc1d6a4a93a2369d2069fe64989"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "filegator/filegator",
"vendor": "filegator",
"versions": [
{
"lessThan": "7.8.0",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Path Traversal in GitHub repository filegator/filegator prior to 7.8.0."
}
],
"metrics": [
{
"cvssV3_0": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-22",
"description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2022-05-24T12:10:10.000Z",
"orgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
"shortName": "@huntrdev"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://huntr.dev/bounties/07755f07-a412-4911-84a4-2f8c03c8f7ce"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/filegator/filegator/commit/6e2b68f17f48cdc1d6a4a93a2369d2069fe64989"
}
],
"source": {
"advisory": "07755f07-a412-4911-84a4-2f8c03c8f7ce",
"discovery": "EXTERNAL"
},
"title": "Path Traversal in filegator/filegator",
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "security@huntr.dev",
"ID": "CVE-2022-1850",
"STATE": "PUBLIC",
"TITLE": "Path Traversal in filegator/filegator"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "filegator/filegator",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_value": "7.8.0"
}
]
}
}
]
},
"vendor_name": "filegator"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Path Traversal in GitHub repository filegator/filegator prior to 7.8.0."
}
]
},
"impact": {
"cvss": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://huntr.dev/bounties/07755f07-a412-4911-84a4-2f8c03c8f7ce",
"refsource": "CONFIRM",
"url": "https://huntr.dev/bounties/07755f07-a412-4911-84a4-2f8c03c8f7ce"
},
{
"name": "https://github.com/filegator/filegator/commit/6e2b68f17f48cdc1d6a4a93a2369d2069fe64989",
"refsource": "MISC",
"url": "https://github.com/filegator/filegator/commit/6e2b68f17f48cdc1d6a4a93a2369d2069fe64989"
}
]
},
"source": {
"advisory": "07755f07-a412-4911-84a4-2f8c03c8f7ce",
"discovery": "EXTERNAL"
}
}
}
},
"cveMetadata": {
"assignerOrgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
"assignerShortName": "@huntrdev",
"cveId": "CVE-2022-1850",
"datePublished": "2022-05-24T12:10:10.000Z",
"dateReserved": "2022-05-24T00:00:00.000Z",
"dateUpdated": "2024-08-03T00:17:00.986Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2022-1849 (GCVE-0-2022-1849)
Vulnerability from cvelistv5 – Published: 2022-05-24 12:05 – Updated: 2024-08-03 00:17
VLAI
EPSS
VEX
Title
Session Fixation in filegator/filegator
Summary
Session Fixation in GitHub repository filegator/filegator prior to 7.8.0.
Severity
4.3 (Medium)
CWE
- CWE-384 - Session Fixation
Assigner
References
2 references
| URL | Tags |
|---|---|
| https://huntr.dev/bounties/881f8f36-d5c8-470d-826… | x_refsource_CONFIRM |
| https://github.com/filegator/filegator/commit/fcd… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| filegator | filegator/filegator |
Affected:
unspecified , < 7.8.0
(custom)
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T00:17:00.823Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://huntr.dev/bounties/881f8f36-d5c8-470d-8261-f109e6d5db4b"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/filegator/filegator/commit/fcd3995f64f5dfc6a4c2c059cc22a2fef1e81225"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "filegator/filegator",
"vendor": "filegator",
"versions": [
{
"lessThan": "7.8.0",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Session Fixation in GitHub repository filegator/filegator prior to 7.8.0."
}
],
"metrics": [
{
"cvssV3_0": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
"version": "3.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-384",
"description": "CWE-384 Session Fixation",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2022-05-24T12:05:10.000Z",
"orgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
"shortName": "@huntrdev"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://huntr.dev/bounties/881f8f36-d5c8-470d-8261-f109e6d5db4b"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/filegator/filegator/commit/fcd3995f64f5dfc6a4c2c059cc22a2fef1e81225"
}
],
"source": {
"advisory": "881f8f36-d5c8-470d-8261-f109e6d5db4b",
"discovery": "EXTERNAL"
},
"title": "Session Fixation in filegator/filegator",
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "security@huntr.dev",
"ID": "CVE-2022-1849",
"STATE": "PUBLIC",
"TITLE": "Session Fixation in filegator/filegator"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "filegator/filegator",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_value": "7.8.0"
}
]
}
}
]
},
"vendor_name": "filegator"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Session Fixation in GitHub repository filegator/filegator prior to 7.8.0."
}
]
},
"impact": {
"cvss": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
"version": "3.0"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-384 Session Fixation"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://huntr.dev/bounties/881f8f36-d5c8-470d-8261-f109e6d5db4b",
"refsource": "CONFIRM",
"url": "https://huntr.dev/bounties/881f8f36-d5c8-470d-8261-f109e6d5db4b"
},
{
"name": "https://github.com/filegator/filegator/commit/fcd3995f64f5dfc6a4c2c059cc22a2fef1e81225",
"refsource": "MISC",
"url": "https://github.com/filegator/filegator/commit/fcd3995f64f5dfc6a4c2c059cc22a2fef1e81225"
}
]
},
"source": {
"advisory": "881f8f36-d5c8-470d-8261-f109e6d5db4b",
"discovery": "EXTERNAL"
}
}
}
},
"cveMetadata": {
"assignerOrgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
"assignerShortName": "@huntrdev",
"cveId": "CVE-2022-1849",
"datePublished": "2022-05-24T12:05:10.000Z",
"dateReserved": "2022-05-24T00:00:00.000Z",
"dateUpdated": "2024-08-03T00:17:00.823Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}