CVE-2022-39833 : FileCloud Versions 20.2 and later allows remote attackers to potentially cause u

FileCloud Versions 20.2 and later allows remote attackers to potentially cause unauthorized remote code execution and access to reported API endpoints via a crafted HTTP request.

Published 2022-11-23 18:15:12

Updated 2022-11-30 16:37:26

Source MITRE

View at NVD, CVE.org

Vulnerability category: Execute code

Products affected by CVE-2022-39833

Filecloud » Filecloud
Versions from including (>=) 20.2 and before (<) 21.3.7.18607
cpe:2.3:a:filecloud:filecloud:*:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2022-39833

EPSS FAQ

0.12%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 46 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2022-39833

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.2	HIGH	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H	1.2	5.9	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: High User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

References for CVE-2022-39833

https://www.filecloud.com/supportdocs/fcdoc/latest/server/security-advisories/2022-security-advisories/advisory-2022-10-01-unauthorized-access-and-potential-remote-code-execution

Advisory 2022-10/01 Unauthorized access and potential remote code execution - FileCloud Docs
Vendor Advisory
https://gist.github.com/DylanGrl/4b4e0d53bb7626b2ab3f834ec5a2b23c

CVE-2022-39833 - PoC · GitHub
Exploit;Third Party Advisory

Jump to

Vulnerability Details : CVE-2022-39833

Products affected by CVE-2022-39833

Exploit prediction scoring system (EPSS) score for CVE-2022-39833

CVSS scores for CVE-2022-39833

References for CVE-2022-39833