CVE-2021-46398

A Cross-Site Request Forgery vulnerability exists in Filebrowser < 2.18.0 that allows attackers to create a backdoor user with admin privilege and get access…

published February 4, 2022

CVSS
—
EPSS
7%
Percentile
93.9
In the wild
Unconfirmed
What it is

A Cross-Site Request Forgery vulnerability exists in Filebrowser < 2.18.0 that allows attackers to create a backdoor user with admin privilege and get access to the filesystem via a malicious HTML webpage that is sent to the victim. An admin can run commands using the FileBrowser and hence it leads to RCE.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06717 · 93.9th percentile
Published
2022-02-04T15:05Z
EPSS history
Timeline
  • 04 FEB 15:05Z
    A Cross-Site Request Forgery vulnerability exists in Filebrowser < 2.18.0 that allows attackers to create a backdoor user with admin privilege and get access…
    cvelistv5