Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A stored cross-site scripting (XSS) vulnerability exists in FileBrowser < v2.16.0 that allows an authenticated user authorized to upload a malicious .svg file which acts as a stored XSS payload. If this stored XSS payload is triggered by an administrator it will trigger malicious OS commands on the server running the FileBrowser instance.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
FileBrowser 跨站脚本漏洞
Vulnerability Description
FileBrowser是开源的一款网页文件浏览器。提供指定目录下的文件管理界面，可用于上传、删除、预览、重命名和编辑您的文件。它允许创建多个用户，每个用户可以有自己的目录。它可以用作独立的应用程序或中间件。 FileBrowser 2.16.0存在跨站脚本漏洞，该漏洞源于软件对于上传的svg文件没有进行有效的验证和过滤，允许经过身份验证的用户授权上传一个恶意的.svg文件，该文件作为存储的跨站点脚本有效载荷。如果这个存储的XSS有效负载由管理员触发，它将在运行FileBrowser实例的服务器上触发恶意操
CVSS Information
N/A
Vulnerability Type
N/A