Vulnerability GHSA-47vg-483w-hp3m
Medium Risk
MEDIUM RISK
CVSS Score: 4.3
Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
4 years ago
May 25, 2022 at 12:00 AM UTC
Improper user session handling in filegator
7.0.0-RC1 - 7.7.2
7.0.0-RC1 - 7.7.2
Summary
Improper user session handling in filegator
Details
FileGator prior to version 7.8.0 is vulnerable to session fixation.
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Medium Risk
6 hours ago
FileGator: Missing authorization in POST /upload allows cross-user read and deletion of temporary files
7.0.0-RC1 - 7.14.4 GHSA-44r8-3p76-84mw
7.0.0-RC1 - 7.14.4 GHSA-44r8-3p76-84mw
Medium Risk
6 hours ago
FileGator: Missing authorization in GET /batchdownload allows cross-user retrieval of another user's archive
7.0.0-RC1 - 7.14.4 GHSA-f74m-x83r-c4v4
7.0.0-RC1 - 7.14.4 GHSA-f74m-x83r-c4v4
Medium Risk
4 years ago
Path Traversal in FileGator
7.0.0-RC1 - 7.7.2 GHSA-rrhw-54r8-545q
7.0.0-RC1 - 7.7.2 GHSA-rrhw-54r8-545q
Impacted packages
Timeline
Published
4 years ago
May 25, 2022 at 12:00 AM UTC
Last Modified
3 years ago
November 08, 2023 at 04:07 AM UTC