{"action":"Upgrade github.com/filebrowser/filebrowser/v2 to 2.18.0 or later.","affected":[{"fixed":"2.18.0","introduced":"0"}],"component":"github.com/filebrowser/filebrowser/v2","cve_ids":["CVE-2021-46398"],"ecosystem":"Go","epss":0.06717,"exploited":false,"fixed_versions":["2.18.0"],"ghsa_id":"GHSA-72wf-hwcq-65h9","id":"tcs_01M5KFW5FZVJS13KT3DG1DVVN1","modified_at":"2024-05-20T16:03:47Z","published_at":"2022-02-05T00:00:31Z","references":["https://osv.dev/vulnerability/GO-2022-0563","https://github.com/filebrowser/filebrowser/commit/74b7cd8e81840537a8206317344f118093153e8d","https://github.com/filebrowser/filebrowser/issues/1621","https://systemweakness.com/critical-csrf-to-rce-in-filebrowser-865a3c34b8e7"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2022-0563","url":"https://osv.dev/vulnerability/GO-2022-0563"}],"summary":"Cross-site request forgery in github.com/filebrowser/filebrowser/v2"}