Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A cross-site scripting (XSS) vulnerability in FileBrowser before v2.23.0 allows an authenticated attacker to escalate privileges to Administrator via user interaction with a crafted HTML file or URL.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
FileBrowser 跨站脚本漏洞
Vulnerability Description
FileBrowser是开源的一款网页文件浏览器。提供指定目录下的文件管理界面，可用于上传、删除、预览、重命名和编辑您的文件。它允许创建多个用户，每个用户可以有自己的目录。它可以用作独立的应用程序或中间件。 FileBrowser v2.23.0之前版本存在安全漏洞。攻击者利用该漏洞通过用户与特制的HTML文件或URL交互将权限升级为管理员。
CVSS Information
N/A
Vulnerability Type
N/A