CVE-2022-24633

—

CVSS 3.1

5.3 medium

EPSS

<1%p55

Published

Feb 24, 2022 (Feb 24, 2022)

Modified

Jun 17, 2026

Description

All versions of FileCloud prior to 21.3 are vulnerable to user enumeration. The vulnerability exists in the parameter "path" passing "/SHARED/ ". A malicious actor could identify the existence of users by requesting share information on specified share paths.

Vendors: filecloud
Products: filecloud
Weakness: CWE-200
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.