CVE-2022-39833 | Vulnerability Database | Aqua Security

NVD

https://nvd.nist.gov/vuln/detail/CVE-2022-39833

CWE

https://cwe.mitre.org/data/definitions/.html

FileCloud Versions 20.2 and later allows remote attackers to potentially cause unauthorized remote code execution and access to reported API endpoints via a crafted HTTP request.

Affected Software

Name	Vendor	Start Version	End Version
Filecloud	Filecloud	20.2 (including)	21.3.7.18607 (excluding)

References

https://gist.github.com/DylanGrl/4b4e0d53bb7626b2ab3f834ec5a2b23c
https://www.filecloud.com/supportdocs/fcdoc/latest/server/security-advisories/2022-security-advisories/advisory-2022-10-01-unauthorized-access-and-potential-remote-code-execution
https://gist.github.com/DylanGrl/4b4e0d53bb7626b2ab3f834ec5a2b23c
https://www.filecloud.com/supportdocs/fcdoc/latest/server/security-advisories/2022-security-advisories/advisory-2022-10-01-unauthorized-access-and-potential-remote-code-execution