CVE-2023-28876

EUVD-2023-32496
A Broken Access Control issue in comments to uploaded files in Filerun through Update 20220202 allows attackers to delete comments on files uploaded by other users.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.3 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 16%
Affected Products (NVD)
VendorProductVersion
afianfilerun
𝑥
≤ 2022.02.02
𝑥
= Vulnerable software versions
References
https://filerun.com/changelog
https://herolab.usd.de/security-advisories/usd-2022-0010/
https://filerun.com/changelog
https://herolab.usd.de/security-advisories/usd-2022-0010/