CVE-2023-28876

A Broken Access Control issue in comments to uploaded files in Filerun through Update 20220202 allows attackers to delete comments on files uploaded by other users.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.3 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 16%
VendorProductVersion
afianfilerun
𝑥
≤ 2022.02.02
𝑥
= Vulnerable software versions
References
https://filerun.com/changelog
https://herolab.usd.de/security-advisories/usd-2022-0010/
https://filerun.com/changelog
https://herolab.usd.de/security-advisories/usd-2022-0010/