Description (CNA)
Fileflows versions before 25.05.2 are affected by an authenticated SQL injection vulnerability in the library-file search function. Successful exploitation requires the system to use MySQL as the underlying database and could result in privilege escalation or data exfiltration.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| fileflows / fileflows | affected 0 before 25.05.2 |
CWE
CWE-89
References
- https://fileflows.com/docs/versions#version-2505
- https://projectblack.io/blog/fileflows-sql-injection-by-decompiling-net-code/#exploitation
ADP enrichment
No English description supplied.
No references supplied.