CVE-2022-24633

All versions of FileCloud prior to 21.3 are vulnerable to user enumeration

published February 22, 2022

CVSS
—
EPSS
1%
Percentile
56.6
In the wild
Unconfirmed
What it is

All versions of FileCloud prior to 21.3 are vulnerable to user enumeration. The vulnerability exists in the parameter "path" passing "/SHARED/<username>". A malicious actor could identify the existence of users by requesting share information on specified share paths.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00815 · 56.6th percentile
Published
2022-02-22T12:33Z
EPSS history
Timeline
  • 22 FEB 12:33Z
    All versions of FileCloud prior to 21.3 are vulnerable to user enumeration
    cvelistv5