Go/github.com/filebrowser/filebrowser/v2 CVE-2021-46398: unknown, EPSS 6.72%

Cross-site request forgery in github.com/filebrowser/filebrowser/v2

Action: Upgrade github.com/filebrowser/filebrowser/v2 to 2.18.0 or later.

go get github.com/filebrowser/filebrowser/v2@v2.18.0

Affected

Fixed versions

Sources

• osv: GO-2022-0563
• https://github.com/filebrowser/filebrowser/commit/74b7cd8e81840537a8206317344f118093153e8d
• https://github.com/filebrowser/filebrowser/issues/1621
• https://systemweakness.com/critical-csrf-to-rce-in-filebrowser-865a3c34b8e7

CVE-2021-46398 · published 2022-02-05T00:00:31Z · modified 2024-05-20T16:03:47Z · JSON